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Abstract. We study quadratic residue difference sets, GMW difference sets, and dif- 
ference sets arising from monomial liyperovals, all of which are {2'^ — 1, 2'^~^ — 1, 2''^^ — 1) 
cyclic difference sets in the multiplicative group of the finite field of 2^^ elements, with 
d> 2. We show that, except for a few cases with small d, these difference sets are all pair- 
wise inequivalent. This is accomplished in part by examining their 2-ranks. The 2-ranks 
of all of these difference sets were previously known, except for those connected with the 
Segre and Glynn hyperovals. We determine the 2-ranks of the difference sets arising from 
the Segre and Glynn hyperovals, in the following way. Stickelberger's theorem for Gauss 
sums is used to reduce the computation of these 2-ranks to a problem of counting certain 
cyclic binary strings of length d. This counting problem is then solved combinatorially, 
with the aid of the transfer matrix method. We give further applications of the 2-rank 
formulas, including the determination of the nonzeros of certain binary cyclic codes, and 
a criterion in terms of the trace function to decide for which /? in F*^ the polynomial 
+ X + l3 has a zero in F2ci, when d is odd. 



1. Introduction 

Let G be a finite (multiplicative) group of order v. A A'-element subset D of G is 
called a {v, K, X) difference set in G if the list of "differences" did2^, di,d2 € D, di d2, 
represents each nonidentity element in G exactly A times. Thus, D is a {v, K, A) difference 
set in G if and only if it satisfies the following equation in Z[G]: 

where 1g is the identity element of G. If the group G is cyclic, then D is called a cyclic 
difference set. 

We say that the {v, K, A) difference sets Di and D2 in an Abelian group G are equivalent 
if there exists an automorphism a of G and an element a & G such that ^(i^i) = D2a. 
In particular, if G is cyclic, then Di and D2 are equivalent if there exists an integer t, 
{t, v) = 1, such that Di = Dg^^a for some a & G, where Dg*'' = I ^ D2}. 

In the case G is Abelian, using the Fourier inversion formula, we obtain the following 



standard result in the theory of difference sets |£8|, p. 323] 
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Lemma 1.1. Let G be an Abelian group of order v. A K-suhset D is a (f , A) difference 
set in G if and only if 



x{D)x{D) = K-X (1.2) 

for every nontrivial complex multiplicative character x of G. Here, x{D) stands for 
Y.d&DX{d). 

Difference sets are tlie same objects as symmetric designs witli a regular automorpliism 
group (see p. 243]). Tlierefore tliey play an important role in the theory of combina- 
torial designs. The study of difference sets is also closely related to coding theory, finite 
geometry, and communication signal designs. We refer the reader to the book of Lander 



T6[| and the paper of Jungnickel [15[ for a survey of this subject. 

Let Fg be the finite field with q elements, q being a power of the prime p. Let be 
a fixed complex primitive pth root of unity and let Tr^/p be the trace from to Z/pZ. 



Define 



Tr,/p(x) 



P 



which is easily seen to be a nontrivial character of the additive group of F^. Let 

X:F;^C* 

be a multiplicative character of F*. We extend x to all of F^ by setting x(0) = 0. Note 
that x'^~^ = 1 (the trivial character), so the order of x is prime to p. 
Define the Gauss sum by 

aGF, 

One of the elementary properties of Gauss sums is 0, Theorem 1.1.4] 



9{x)g{x) = q, if X 7^ 1- (1-3) 

If Xi)X2 are two multiplicative characters, we define the Jacobi sum by 

J{XuX2) = Xi(a)X2(l - a). 

Jacobi sums are closely related to Gauss sums. In fact if Xi 7^ 1)X2 7^ Ij and X1X2 7^ 1, 
then Theorem 2.1.3] 

J{Xu X2) = 9{Xi)9{X2)lg{XiX2), (1-4) 

and 



J{.Xi^X2)J{xi,X2) = q- (1-5) 

The apparent analogy between (|L^) and |( |1.3| ), (|1.5D| suggests that there may be a 
connection between difference sets and Gauss and Jacobi sums. This is indeed the case. 
In fact, several authors have investigated difference sets by using Gauss sums and Jacobi 
sums; for example, see 0, Chapter 5], ||3^. However, such investigations deal mostly 
with power residue difference sets. In Section 2 of this paper, we use Jacobi sums to give 
a simple new proof that certain sets which Maschietti PT| constructed from hyperovals 



are cyclic (2"^ — 1,2"^ ^ — 1,2^^ difference sets; see Theorem |2.5|. Then in Section 3 



we use Stickelberger's theorem on the prime ideal decomposition of Gauss sums to give 
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a new proof of the p-rank formula for Singer difference sets (which include the difference 
sets arising from regular and translation hyperovals); see Theorem p.5|. The main result 



of Section 3 is Theorem p.6| , where, again using Stickelberger's theorem, we reduce the 
problem of computing the 2-ranks of the difference sets arising from Segre and Glynn 
hyperovals to a problem of counting certain cyclic binary sequences. In Section 4, we 
solve the counting problem completely, with the aid of the transfer matrix method; see 



Theorem [4.3| . In the case of the Segre hyperovals, this yields an explicit formula for 



their 2-ranks in terms of Fibonacci numbers; see Corollary |4.4|. This explicit formula 



had been conjectured by Xiang In the case of the Glynn hyperovals we obtain 5- 
term recurrence relations for the 2-ranks of the corresponding cyclic difference sets; see 
Theorems |]| and |]8[ 

As applications, in Section 5, we determine the nonzeros of the binary cyclic codes which 
result from the Segre hyperovals, and we give a criterion to decide when the equation 
x^ + x + P = 0, Pe ¥*a, has two distinct solutions in F2d, d odd. 

The main applications of our results are contained in Section 6. There we show that, 
except for a few small values of d, the Singer difference sets and the difference sets which 



arise from the Segre and the Glynn hyperovals are all inequivalent; see Theorem 6.2. 



This answers a question raised by Maschietti We also show that difference sets 



arising from hyperovals are inequivalent to quadratic residue difference sets [15, p. 244] 
(see Theorem |6.3| ) and to GMW difference sets [|ri[] (see Theorem |6.8| ). 

Finally, in Section 7, we use the machinery developed in this paper to compute the 
2-ranks of certain circulant matrices. These matrices are closely related to incidence 
matrices corresponding to difference sets arising from hyperovals. 

2. Gauss Sums, Jacobi Sums and Cyclic Difference Sets 

Singer (1938) (cf. |]15, p. 244]) discovered a large class of difference sets which are related 
to finite projective geometry and to (generalized) Reed-Muller codes (cf. p. 180]). These 
difference sets Lq, whose construction we give below, have parameters 

qd_i ^ 

v = -, K = — , A = — 

q — I Q — Q ~ ^ 

for d > 2 and they exist whenever g is a prime power. 

The construction is as follows. Let F^d be the finite field of q"^ elements, d >2, and let 
Tr be the trace from F^d to ¥g. We may take a system L of coset representatives of F* in 
F*rf such that Tr maps L into {0, 1}. Write L = LqU Li, where 

Lo = {xeL \ Tt{x) =0}, Li = {xeL \ Ty{x) = 1}. 

The following proof that Lq is a difference set is due to Yamamoto |]33|. We present 
it here since it is less well-known than the standard one using a Singer cycle, and since 
we will use it to give a new proof of the p-rank formula for the Singer difference sets (see 



Theorem |3.5| ). This proof of Theorem ^TT] is essentially an evaluation of the Eisenstein 
sum x{Lo)] see [|, pp. 389, 400]. 

Theorem 2.1. With the above notation, Lq is a (~~f ? q-i^ ' g-i^ ^ difference set in 
the quotient group F*d/F*. 
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Proof: Let % be a nontrivial multiplicative character of F^d whose restriction to F* is 
trivial, so that we may view x as a character of the quotient group F*d/F*. It is easy to 
see that every nontrivial character of F*tj/F* can be obtained in this manner. We have 

ySF*^ a6F* xeL 

xGL aeF* 



x£Lo xeLi xeLo 



By (|1.3|), we have x{Lo)xiLo) = q . The theorem now follows from Lemma □ 



Remark: When q = 2, Singer difference sets have parameters (2*^ —1,2'^ ^ — 1,2'^ ^"1)) 
which are a special case of the Hadamard parameters {4n — l,2n — l,n — 1) (see 
p. 244]). 

Cyclic (2^^ — 1, 2'^~^ — 1, 2"^"^ — 1) difference sets have been extensively studied because of 
their important applications in communication signal designs (see 0]). Known examples 
of these difference sets include Singer difference sets, GMW difference sets (see [p!T|), 
quadratic residue difference sets Jl5|, p. 244] and the cyclic (2^^ — 1,2^^^^ — 1,2*^"^ — 1) 



difference sets constructed recently by Maschietti |]2T[ by using monomial hyperovals. 

We proceed to discuss Maschietti's difference sets. An m-arc in the projective plane 
PG{2, q), with q a prime power, is a set of m points, no three of which are coUinear. The 
maximum value of m is g + 1 or g + 2, according as q is odd or even. If q is odd, (g + l)-arcs 
are called ovals. A celebrated theorem of Segre p5[ (see also [|I4[ p. 168]) states that all 



such ovals are given algebraically by irreducible conies. If q is even, (g + 2)-arcs are called 
hyperovals. The classic example of a hyperoval is the union of an irreducible conic and its 
nucleus (see |]14|, p. 164]). 

Two hyperovals are said to be projectively equivalent if one hyperoval can be transformed 
into the other by a projective linear transformation, i.e., by an element from PGL{3,q). 
By the Fundamental Theorem of Projective Geometry, the group PGL{3, q) of projective 
linear transformations of PG{2, q) is transitive on quadrangles. Thus every hyperoval can 
be mapped by an element of PGL{3, q) to a hyperoval containing the fundamental quad- 
rangle (1, 0, 0), (0, 1, 0), (0, 0, 1), and (1, 1, 1). From now on, we will restrict our attention 
to those hyperovals PG{2, q) with q> 2 which contain the fundamental quadrangle. The 
following result of Segre (see |n. Theorem 8.4.2]) shows that any such hyperoval can be 
expressed in terms of a permutation polynomial over Fg, i.e., a polynomial which, when 
interpreted function, permutes Fg. 

Theorem 2.2. (Segre). Let q > 2 be a power of 2. Then any hyperoval in PG{2,q) 
containing the fundamental quadrangle is equal to a {q + 2)-arc 

D{f) = {(1, t, fit)) I t G FJ U {(0, 1, 0), (0, 0, 1)}, 
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where f is a permutation polynomial over ¥q of degree at most q — 2, satisfying /(O) = 
0, /(I) = 1, and such that for each s G F^, 



is a permutation polynomial. 

Conversely, every such set D{f) is a hyperoval. 

These polynomials f{x) are also called o-polynomials. 

A subclass of hyperovals is the set of monomial hyperovals. These are hyperovals in 
PG{2, 2'^) projectively equivalent to 



Known examples of monomial hyperovals in PG(2, 2'^) include 
( |2.1j ) the reg"u/ar hyperoval D(x^), 

( |2.2| ) the translation hyperovals where {d,i) = 1, 1 < i < d/2, 

(|2.3| ) the Segre hyperoval D{x^), where o? > 5 is odd, 

(|2.4| ) the Glynn type (I) hyperovals D(x"~^^), where c? > 7 is odd, a = 2'^^+-^^/^, and 

7 = 2(3'>'+i)/4 i{d=l mod 4, whereas 7 = 2("'+i)/^ if d = 3 mod 4, 
( |2.5| ) the Glynn type (II) hyperovals where (i > 11 is odd, and a = 2^'^^^^^^. 

Remark: We have not listed the translation hyperovals for i = 1 nor the Segre and Glynn 
hyperovals for c? = 3, as these are all projectively equivalent to the regular hyperovals. 
The translation hyperoval for a given i > d/2 is equivalent to the one where i is replaced 
hj d — i. The Glynn hyperovals for d = 5 are equivalent to translation hyperovals, while 
the Glynn type (II) hyperovals for d = 7 and d = 9 are respectively equivalent to the 
Segre hyperoval D{x^) and the Glynn type (I) hyperoval D{x^^^). These equivalences all 
follow from Lemma p.3| below. It can be shown using Lemma |2.3| that the hyperovals 
listed in (prT| ) -(p3| ) are all mutually projectively inequivalent. For example, to show that 
the Segre hyperovals are inequivalent to the translation hyperovals, one shows that none 
of 6, 1/6, —5, —1/5, 6/5, or 5/6 (mod q — I) can equal a power of 2 (mod q — 1), where 
q = 2'^ for odd d > 5. The computations involved are tedious but straightforward. 

Glynn p conjectured that the hyperovals listed in (|2.1| ) -(|2.5| ) (together with the equiv- 
alent hyperovals given by Lemma |2]^ below) comprise all monomial hyperovals. This 
conjecture still remains open. Some progress was made in a recent paper by Cherowitzo 
and Storme |^. 

Lemma 2.3. (|]^, [^) Let q > 2 be a power of 2. Two monomial hyperovals D{x^) and 
D{x^) in PG{2,q) are projectively equivalent if and only if j = k, 1/k, 1 — k, 1/(1 — k), 
k/{k — 1), or {k — l)/k (mod q — 1). 

Proof: First, if D{x^) is a monomial hyperoval in PG{2, q), then it is well known that 
for any j congruent to k, 1/k, 1 — k, 1/(1 — A;), k/{k — l), or {k — l)/k modulo q—1, D{x^) is 
projectively equivalent to D{x^) (see [^). Conversely, it follows from |2^, Theorem 12.5.3] 
that if D{x^) is projectively equivalent to D[x^), then j is congruent to one of fc, 1/k, 
1 — k, 1/(1 — k), k/{k — 1), {k — l)/k modulo q — 1- This completes the proof. □ 




D{x^) = {(1, t, t^)\te F24 u {(0, 1, 0), (0, 0, 1)}. 
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Let r : be defined by 

r(x) = X + x'', 

and let Imr be the image of tlie map r. We need tlie following lemma from Maschietti 



21]. For the convenience of the reader, we include a proof. In the statement of the lemma, 



and its proof, we use the convention that points in PG{2,q) are labelled as {z,x,y). 

Lemma 2.4. Letq = 2'^. The {q + 2)-set D{x^) = {(l,t,t'^) | t G FJ U {(0, 1, 0), (0, 0, 1)} 
in PG{2, q) is a hyperoval if and only if {k,q — 1) = 1 and t is a two-to-one map from ¥q 
into itself. 

Proof: If D{x^) is a hyperoval, then x^ is a permutation polynomial on F^, so {k, q — 
1) = 1. Furthermore, any affine line ?/ = x + a (a G Fg) meets D{x'^) at either or 2 
distinct points, which implies that x'^ + x + a = has either or 2 distinct solutions in 
Fg, that is, the map r is two-to-one. 

Conversely, if r is two-to-one, then the equation x^ + x = has exactly two solutions, 
namely and 1. Hence, there is no {k — l)th root of 1 distinct from 1 in Fg, so that 
(fc-l,g-l) = L 

It is straightforward to show that a line of PG{2, q) with homogeneous equation cy = 
ax + bz, with abc = 0, intersects D{x'^) at either or 2 points. It remains to show that 
the line y = ax + bz, with ab ^ 0, intersects D{x^) at either or 2 points. 

It is clear that there are no intersection points {0,x,y) of the line with D[x''). Thus 
set 2 = 1 and consider the affine equation x^ = ax -\- b. We must show that this equation 
has or 2 solutions. This follows from the hypothesis that r is two-to-one, as can be seen 
after making the change of variable x = a*^x'. This completes the proof. □ 



Remark: From Lemma |2.4| and its proof, it follows that when D{x ) is a hyperoval in 



PG{2, q), with q = 2 , then k and k — 1 are both relatively prime to g — 1. 



Using the geometry of hyperovals, Maschietti proved that if D{x^) is a hyperoval 
in PG(2,2'^), then 



Dk,d = lmT\{0} 

2d- 



is a (2^^ — 1,2'^ ^ — 1,2'' ^ ~ 1) difference set in F*^^. In the following theorem, we give a 
simpler proof using Jacobi sums. 



Theorem 2.5. Let q = 2'^. If D{x'') = {{l,t,t'') | t G F J U {(0, 1, 0), (0, 0, 1)} is a 
hyperoval in PG{2, q), then Dk^ = Imr \ {0} is a {q — 1, q/2 — 1, g/4 — 1) difference set 



in F*. 



Proof: Let x be a nontrivial multiplicative character of Fg. Since D{x^) is a hyperoval. 



T is two-to-one by Lemma 2.4, and we have 



, , x'-'' 

x&„ x<=¥„ 
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By the previous remark, (A; — 1, g — 1) = 1, so there exists a multiphcative character of 
Wq such that x = 4>^~^- Hence 

xPm) = ^ E ^i^'^'Ml + ^''') = X). (2.6) 



Noting that 0x = 'P^ is nontrivial, we have, by ( |1.5|) , x(-Dfc,(i)x(-Dfc,d) = 2^^ ^. Now the 



theorem follows from Lemma 1.1. □ 



The following proposition shows that two projectively equivalent monomial hyperovals 
give rise to two equivalent cyclic difference sets under the construction of Theorem 



Proposition 2.6. Let q = 2'^, q > 2. If D{x^) and D{x^) are two projectively equivalent 
monomial hyperovals in PG{2,q), then the corresponding difference sets Dk,d o-nd Djd 
constructed in Theorem |2.5| are equivalent. 



Proof: By Lemma f2.4| , we know that j is congruent to one of /c, l//c, 1 — A;, 1/(1 — /c), 
k/{k — 1), {k — l)/k modulo q — 1- Now direct calculation shows that 



D^^,d = D^,, = Di';'\ (2.7) 



D,_,,, = D., = Diy\ (2.8) 



D^.d = (2.9) 



k 



where D*^*-* = {d* | d G D}. For example, to prove (|2.7|) , write c = x + x^ , make the 
variable change x = c/y, then multiply both sides by y^ . This completes the proof of the 
proposition. □ 

The difference sets D{x'^') arising from the regular and translation hyperovals are the 
Singer difference sets {y G F*^ | Tr(?/) = 0}. This follows from Lemma and Hilbert's 
Theorem 90 ||T7| , p. 56]. It is an interesting problem to determine whether the cyclic 
difference sets arising from the Segre and Glynn hyperovals are inequivalent to each other 
and to the previously known ones (such as Singer difference sets, quadratic residue differ- 
ence sets, GMW difference sets). We approach these problems by studying the 2-ranks 
(as defined in Section 3) of these cyclic difference sets. Our conclusions are presented in 
Theorems |6^, 16.31, and 



3. Stickelberger's Theorem and the p-ranks of Cyclic Difference Sets 

We start this section by reviewing a few standard notions from design theory. We refer 
the reader to |1^, p. 243] for details and more information. 

Let G be a (multiplicative) Abelian group of order v, and let D he a. {v, K, A) difference 
set in G. Then V = {V, B) is a {v, K, A) symmetric design with a regular automorphism 
group G, where the set V of points of V is G, and where the set B of blocks of V is 
{gD I g G G}. (As it turns out, the blocks are all distinct.) This design is usually called 
the development of D. The incidence matrix of V is the matrix A whose rows are indexed 
by the blocks B oi T> and whose columns are indexed by the points g of V, where the 
entry As^g in row B and column g is 1 if g E B, and otherwise. 
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The p-ary code of D, denoted Cp{D), is defined to be the row space of A over Wp, 
the field of p elements. This code is also the p-ary code of V, denoted by Cp(V). The 
Fp-dimension of Cp{D) is usually called the p-rank of the difference set D. We shall also 
denote it by rankpD. It is well-known that Cp{D) is of interest only if p \ {K — A); see ^ 
or |T^, p. 297]. So from now on, we always assume that p \ {K — A). 

The p-ranks of difference sets have been studied extensively for several reasons. First, 
if Di and D2 are two equivalent {v, K, A) difference sets in an Abelian group G, then the 
p-ranks of Di and D2 are the same. Therefore, the p-ranks can help us to distinguish two 
inequivalent difference sets. 

Secondly, let Z) be a cyclic (f , K, A) difference set in Z/vZ. Corresponding to D is the 
characteristic sequence {ai}o<j<v-i given by = 1 if z G -D, and = otherwise. This 



sequence has a two-level autocorrelation function (see [T^, p. 62]). The linear complexity 
(or linear span) of {oj} is the smallest degree of a linear shift register over F2 which is 
capable of generating {aj}. It turns out that the linear complexity of {0,} is the same as 
the 2-rank of D. Therefore, the study of 2-ranks of cyclic difference sets is important for 
communications and cryptographic applications; see |]10 . 

A third reason is provided by Theorem |3.2| below. MacWilliams and Mann |T^, 
Goethals and Delsarte 0, and Smith ||26| proved that the p-rank of the {{q'^ — l)/{q 



1), {q'^ ^ — l)/(g — 1), (g*^ ^ — l)/(g — 1)) Singer difference set is {^'l^^^^'^Y + 1, where q = p"" 
for prime p. Subsequently, Hamada [O] made the following conjecture. 



rankpP > 



Conjecture 3.1. Let V be a symmetric design with Singer parameters {{q'^ — l)/(g — 
1), {q'''^^ — 1)/ (g — 1), (g'^^^ — l)/(g — 1)), where q = p'^ . Then one has 

'p + rf-2' 
d- 1 

with equality if and only ifT> is the development of a classical Singer difference set. 

This conjecture still remains open. But Hamada and Ohmori |13| proved the following 
interesting result in this direction. 

Theorem 3.2. Let V he a symmetric design with parameters (2^^ — 1, 2'^^^ — 1, 2^^^^ — 1). 
Then T> is the development of the cyclic Singer difference set with these parameters if and 
only if rank2P = d + 1. 



In Theorem p.5| , we will give a simple new proof of the p-rank formula for the classical 
Singer difference sets. Our approach is different from previous ones in that it uses Gauss 
and Jacobi sums, and Stickelberger's theorem on the prime ideal factorization of Gauss 
sums. 



We first quote a result (Theorem p.3[ ) of MacWilliams and Mann |T9[ . For the conve- 
nience of the reader, we include a proof here. 

Let B = ^g^QhgQ be an element of the group algebra F[G\, where G is an Abelian 
group and F is a field. We associate with B the matrix (feg(c/')-i), whose rows and columns 
are labeled by the group elements g and g' . The rank of {bg(g')~i) is called the rank of B. 
We remark that in particular, if B = Ylig^od^ where D is a (f , K, A) difference set in G, 
then the p-rank of Z), i.e., the Fp-dimension of the code Cp{D), is the same as the rank 
of B over Wp. The reason is that the rows and columns of the incidence matrix of the 
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development of D can be arranged so that the incidence matrix is the transpose (6, ■ -^'^ 
of the matrix 



Theorem 3.3. Let G be an Abelian group of order v and exponent v* , let F be a field of 
characteristic p not dividing v which contains the v*th roots of unity, and let B = XlgeG ^gd 
be an element of the group algebra F[G]. Then the rank of B over F is equal to the number 
of characters x ■ G ^ F* satisfying xiB) ^ 0, where xiB) = EgeG^9^(fi')- 

Proof: Let [xid)) be a matrix whose rows are labeled by the v characters x aiid whose 
columns are labeled by the v group elements g, so that the entry in row x ^"^^ column g 
is xid)- This matrix is nonsingular since l{x{9)){x{9^^)) is the identity matrix. The 
result now follows from the identity 

ixig)) (&.(.')-0 {Xi9-')f = V ■ dmg{x{B)) . 

□ 

We will also need Stickelberger's result (Theorem |3.4| ) on the prime ideal decomposition 
of Gauss sums. We first introduce some notation. 

Let p be a prime, q = p"^, and let C,q-i be a (complex) primitive {q — l)th root of unity. 
Fix any prime ideal p in Z[^q_i] lying over p. Then Z[^q_i]/p is a finite field of order q, 
which we identify with F^. Let ujp be the Teichmiiller character on Fg, i.e., an isomorphism 

a.p:F;^{i,e,-i,eJ-i,...,eri} 

satisfying 

u!p{a) (mod p) = a, (3.1) 

for all a in F*. The Teichmiiller character Up has order q — 1; hence it generates all 
multiplicative characters of F^. 

Let ^ be the prime ideal of Z[^q_i,^p] lying above p. For an integer a, let s(a) = 
v<:p{g{ujp"')), where fq3 is the ^-adic valuation. Thus || g(Lj~"-). The following evalu- 
ation of s{a) is due to Stickelberger (see 0, p. 344], ||29|, p. 96]). 

Theorem 3.4. Let p be a prime, and q = p^ . For an integer a not divisible by q — 1, let 
ao + aip + a2P^ + ■ ■ ■ + as-ip'^~^, < ai < p — 1, be the p-adic expansion of the reduction 
of a modulo q — 1. Then 

s{a) = ao + ai + h cts-i, 

that is, s{a) is the sum of the p-adic digits of the reduction of a modulo q — 1. 

An easily proved consequence of Theorem |3]^ is the formula @, p. 347], p. 98] 

sia) = P^^Liap% (3.2) 

where L[x) is the reduction of x modulo q — 1- 

We are now ready to give a new proof of the p-rank formula for Singer difference sets. 
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Theorem 3.5. For q = , let Lq be the (^z-f , ^-^zy^? ^ q-i^ ) difference set in the quotient 
group F*^/F*, as in Theorem ^.\\ . Then the p-rank of Lq is 



p + d-2 
d- 1 



1. 



Proof: For p a prime ideal in Z[^gd_i] lying over p, let Up be the Teichmiiller character 
on F„d and let x = cUp '''^ ^\ Then x is a generator of the character group of ¥*a/¥*. From 



the proof of Theorem 2.1, we know that for each a, < a < 



g°'-l 



q-1 ' 

q-X''{Lo)=g{x'')- (3.3) 

Note that if Xo is the trivial character, then xo{Lo) = \Lq\ ^0 (mod p). Thus by 
the definition ( |3.1| ) of the Teichmiiller character and Theorem ^.3| , the p-rank of Lq is 
1 + A{q,d), where A{q,d) is the number of < a < {q'^ - l)/{q - 1), such that 
X"(Lo)(mod p) ^0. 

Let ^ be the prime of Z[^qd_i,^p] lying above p. Since ^ | x"(-^o) if and only if 
p I x"(-^o), A{q,d) is equal to the number of x"": < a < {q'^ — !)/('? ~ 1); such that 

By the definition of s{a) (with g'^ in place of g), || g{x°')- Since ^p*^^ || g, we 

see from (|3.3| ) that A{q,d) is equal to the number of a, < a < (g'^ — l)/(g — 1), such 
that s((g — l)a) = (p — l)s, which, in turn, is equal to the number of x, < x < g"' — 1, 
(g — 1) I X, such that s{x) = {p — l)s. 

For X with < x < g"' — 1, write x = J2'j=o Xli=o ^i,jP^1'' ^ — < By (E3) ("^i^h 
g'^ in place of g), 

.(x) = ^5^5^L(xpV), (3.4) 

^ j=0 i=0 

where Liy) denotes the reduction of y modulo q'^ — 1. Suppose that (g — 1) | x and 
s{x) = {p — l)s. Then, by (|3.4|) , 

d-l s-l 

(g'^-l). = 5^5^L(xpY). (3.5) 

Since 

< ^ L{xp'q') = ^2 ^P'^^ = (T^od g"* - 1), 

i=o j=o 

it follows that X]j=o L{xp''q^) > q'^ — 1 for each i Thus, by ( |3.5| ), 

^L(xpV) = g"'- 1 (3.6) 

j=0 

for each z. Write x = ao + ctig + ■ ■ ■ + a^-iq'^ ^, where = X]j=o -^i-.jP^ i 

< j < d-1. 

Then by (|3.6| ) with i = 0, we have Oq + cti + ■ • ■ + ctd-i = g — 1. Thus Yl'jZo ^o,j > P ~ 1. 
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Similarly, by ( p.6| ) for general i, we obtain 

d-l 

^x„>p-l (3.7) 

j=0 

for all i. As 

s-l d-l 

(p - l)s < ^ ^ Xij = s{x) = {p- l)s, 

it follows that equality holds in ( p.7|) for each i. The equation X]j=o^j,j = P ~ ^ 
< p, has (^^^7^) solutions for each i, < i < s. Therefore A{q,d) = This 
completes the proof. □ 

Next we show how to compute the 2-ranks of those cyclic difference sets D^^^ arising from 
monomial hyperovals in Section 2. For succinctness, we will actually state the theorem 
in terms of the 2-rank of the complement D^ fi. (It follows easily from ( |1 . 1| ) that if D is a 
[v, K, A) difference set in G then the complement D of D in G is a. {v,v — K, X — 2K + v) 
difference set in G.) This is just a matter of convenience, as the 2-rank of the difference 
set Dk^d is exactly 1 more than the 2-rank of the complement d (see the proof of 
Theorem |3]^) . 

Theorem 3.6. Let Dk^ be the (2"^ - 1,2^^-^ - 1,2'^-^ - 1) cyclic difference set m F;, 
constructed from the hyperoval D{x^) as in Theorem |2.5| , and let d he the complement 
of d in Fgd- Then the 2-rank of Dk^ is equal to the number of a's, < a < 2'^ — 1, 
such that 

s{a) + s{{k - l)a) = s{ka) + 1, (3.8) 
where s{a) is as defined above Theorem R]^ with q = 2'^. 



Proof: For p a prime ideal in Z[^2'*-i] lyiiig over 2, let uj = Up he the Teichmiiller 
character on ¥2d- By ( |2.6|) , we see that for each a, < a < 2'^ — 1, 

-2 ■ cj-^'^-i)" (A^) = Jicu-", tu-^^-^^"). (3.9) 

By the definition of s{a) (with q = 2^) and (P~iD, 

ps(a)+s{{k~l)a)-s{ka) || J^^^j''^ ^ qj-C'-'^)"-^ (3.10) 



Since p||2, we see from (|3.9| ) that the number of a's, < a < 2 — 1, such that 
^-(fe-i)a (^JJf^ j^ (mod p) 7^ 0, is equal to the number of a's, < a < 2"^ — 1, such that 
s(a) + s{{k — l)a) = s{ka) + 1. Since the cardinality of Di^ a is 2^^^^ = (mod 2), Xo(-Dfe,d) 
(mod p) equals for the trivial character xo- (In contrast, Xo{Dk,d) (mod p) equals 1, 
which is why we prefer to state the theorem in terms of Dj^ d.) Thus, by Theorem |3.3| , 
we see that the 2-rank of Dk^ is equal to the number of a's, < a < 2^^ — 1, for which 
s{a) + s{{k — l)a) = s{ka) + 1. This completes the proof. □ 

Let Bk{d) be the number of a's, < a < 2^^ — 1, for which s{a) + s((fc — l)a) = s{ka) + 1. 
By the above theorem, in order to compute the 2-rank of Dk,d, we need to compute Bk{d). 
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We will discuss the determination of Bk{d) in the next section. But first of all, we observe 
that Bk{d) is always a multiple of d. We state this as a lemma. 

Lemma 3.7. Let B^^d) he the number of a's, Q < a <2'^—l, for which s{a)+s{{k—\)a) = 
s{ka) + 1. Then d \ Bk{d). 

For any a, < a < 2^^ — 1, it follows easily from (|3.2|) that 

d-i 

s{a) + s{{k — l)a) — s{ka) = 



Proof: 



i=0 



( 


2'ka 




2*a 




2\k 


- \)a 


) 




_2'^ - 1_ 




_2^ - 1_ 




2'^ 


- 1 





(3.11) 



where [xj denotes the greatest integer < x (see 0, p. 349], ||29|, p. 98]). 

Clearly, if a is a solution to s{a) + s{(k — l)a) = sika) + 1, then a ■ 2^ is also a solution, 
for all j, < j < (i — 1. We contend that a ■ 2-', j = 0, 1, . . . , d — 1, are necessarily distinct 
modulo 2-^-1. If they were not distinct, then the sum on i in ( |3.11| ) would have more 
than one term equal to 1, contradicting the fact that sia) + s{(k, — l)a) — sikd) = 1. This 
completes the proof. □ 



4. Enumeration of Cyclic Binary Strings and Computation of 2-ranks 

Let d be an integer > 2. In this section, we are concerned with determining explicitly 
the 2-ranks of the difference sets D^ ii corresponding to the hyperovals D{x^) (which, 
by the remark preceding Theorem |3.6| , is equivalent to determining the 2-ranks of the 
difference sets D^ d themselves). By Theorem p.6| , the 2-rank of Di^ d equals the number 
Bk{d) of solutions a, < a < 2^^ — 1, to equation ( p.8|) . The case of the difference sets 
arising from the translation and the regular hyperovals is already covered by Theorem |3.5| , 
as these difference sets are instances of Singer difference sets (see the last paragraph of 
Section 2). Hence, we concentrate on the difference sets arising from the Segre and the 
Glynn hyperovals. Most of the time we will not actually deal with the number Bk{d) of 
solutions itself, but with the quantity Ak{d) = Bk{d)/d. For the convenience of the reader 
we have listed the first few values for A^i^d) (the Segre case, see (f^.3|)), for Ao-+^((i) (the 
Glynn type (I) case, see (|2.4[)), and for y43o-+4((i) (the Glynn type (II) case, see (p3|)). 
These values were originally found by the computer algebra package MAGMA 0. 



d 


3 


5 


7 


9 


11 


13 


15 


17 


19 


21 


23 


25 


A^{d) 


1 


3 


5 


9 


15 


25 


41 


67 


109 


177 


287 


465 


Aa+'yi.d) 


1 


1 


3 


7 


13 


23 


45 


87 


167 


321 


619 


1193 


A2,a+A{d) 


1 


1 


5 


7 


21 


37 


89 


173 


383 


777 


1665 


3441 



Table 1. 



When we entered the values from the table into the Maple package gf un |^ 



we were 

able to guess a linear recurrence for the numbers Ak{d) in each of the three cases. These 
recurrences are established by rather elaborate combinatorial arguments in Theorems |4.3| , 
0| and Consequently, we obtain explicit formulas for the 2-ranks of the difference 
sets Di^ d corresponding to the Segre and Glynn hyperovals D{x^); see Corollaries [4.4| , 
and 
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Table 1 suggests that for d > 15 the 2-ranks A^ld) for the Segre case are the smallest, 
while the 2-ranks A3^+4{d) for the Glynn type (II) case are the largest. This observation 
is established in Lemma 16. 11. 



Our first goal is to determine BQ{d) explicitly in terms of Fibonacci numbers. The 
result, Theorem was conjectured by Xiang |^ . 

Given any integer x not divisible by 2*^ — 1, recall that by Theorem |3.4| with q = 2'^, 
s{x) equals the number of I's in the binary representation of x reduced modulo 2'^ — 1. 
Now, the binary representation of 2x mod 2*^ — 1 is simply the rotation of the binary 
representation of x mod 2"^ — 1 by "one step", i.e., all the digits are moved one step to the 
left, with a 1 that would be moved beyond the leftmost place moved ("rotated") to the 
rightmost place. This implies that s{x) = s{2x). Therefore, given any solution to 
multiples of the solution by powers of 2 will also give solutions to 



Proposition 4.1. Let d be an integer > 2. The binary representations of all the solutions 
a mod 2'^ — 1 to the equation 

s{a) + s{5a) = s{6a) + 1 (4.1) 

can be constructed by the following procedure: 

Step 1. Form all the possible binary strings of length < d by concatenating blocks of the 
form 01, 0011, 00111, subject to the following restrictions: 

(A) In a string of length < d, the rightmost block must be 01, and the block 00111 must 
not occur. 

(B) In a string of length d, the block 00111 occurs exactly once, namely, as the rightmost 
block. {In particular, strings of length d can only occur for odd d.) 

Step 2. Given a string of length k obtained through Step 1, append {d — k) O's on the 
left to form a string of length d. 

Step 3. All the solutions a mod 2'^ — 1 to ( [4.1[ ), or rather their binary representations , 
are obtained by forming all possible rotations of the strings that were constructed in Step 2. 

Before we move on to a proof of the proposition, we illustrate this construction by an 
example. 

Example 4.2. Let d = 9. Then all possible strings formed in Step 1 are (the bars indicate 
separation of blocks) 

01, 01|01, 01|01|01, 01|01|01|01, 0011|01, 
0011|01|01, 01|0011|01, 01|01|00111, 0011|00111. (4.2) 

Hence, according to Steps 2 and 3, the solutions a mod 2^^ — 1 to ( |4.1| ), in binary 
notation, are all the possible rotations of 

000000001, 000000101, 000010101, 001010101, 000001101, 

000110101, 001001101, 010100111, 001100111. (4.3) 

Therefore, the solutions are 

1,5,21,85,13,53,77, 167,103, 
and their multiples by powers of 2, for a total of 9 ■ 9 = 81 solutions. 
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Proof of Proposition |4.1j . It is straightforward to clieck tliat tlie numbers obtained by 
the proposed construction are indeed solutions to ( |4.1| ). We leave this to the reader. 

It remains to be shown that there cannot be other solutions to ( [4.1| ). We do this by 
performing by-case analysis which rules out all other possibilities. 

From now on, when we talk about some number x mod 2'^ — 1, we always assume that 
X is reduced mod 2^^ — 1 to a number between and 2'^ — 2. When we refer to a, 5a, and 
6a, these numbers are to be viewed mod 2'^ — 1. 

Before we start our case-by-case analysis, it is helpful to recall what we would like 
to achieve. We want to find each number a such that the number of I's in the binary 
representation of 6a is exactly one less than the number of I's in the binary representation 
of a plus the number of I's in the binary representation of 5a. 

On the other hand, by carrying out the addition a + 5a = 6a (mod 2*^ — 1), we see 
that the number of I's in the binary representation of 6a can be at most the total of the 
number of I's in the binary representations of a and 5a minus the number of instances 
of a 1 occurring at the same place in a and 5a. To give an example, if d = 5, and if 
a = 11010, so 5a = 00110, then the number of I's in 6a can be at most 3 + 2 — 1 =4. 
(The number of I's in the binary representation of a is 3, the number of I's in the binary 
representation of 5a is 2, and there is a 1 in both a and 5a in the second position from 
the right.) In fact, 6a = 00001, so the number of I's in 6a is even less. 

Thus we can limit our search to a's for which there is exactly one such instance of a 1 in 
the same position in a and 5a. In particular, if we detect two such instances in a and 5a, 



then a cannot be a solution to (O!). To guarantee that the number of I's in the binary 



representation of 6a is exactly one less (as opposed to two or more less), we must have a 

in both a and 5a in the position which is immediately to the left of the position where 

1 occurs in both a and 5a. 

In the analysis that follows, it does not matter whether we consider a or 2'"a, for a 
positive integer m. In terms of binary representations this means that it does not matter 
whether we consider the binary representation of a or any cyclic permutation of it. 

Now we turn to our case-by-case analysis. Since Proposition is easily checked for 
the cases ci = 2, 3, 4, 5, we may assume in the following that d > 6. 

Case 1. The block 11111 occurs in the binary representation of a. Suppose that 11111 
occurs in the binary representation of a. Then, since 5a = a + 4a, we have 

a= ....11111.. 
4a = ..11111.... 



5a = ....11 

So, there are two instances of I's in the same position in a and 5a. Hence, a cannot be a 



solution to (^ 



Case 2. The block 1111 occurs in the binary representation of a. Since we already ruled 
out that mil occurs, we may assume that there is a before, and a after 1111. We 
have 

a= ....011110.. 
4a = ..011110.... 

5a = 
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Now, if in the underlined position there is no 1 carrying over from the right, then the 
addition would give 

a= ....011110.. 
4a = ..011110.... 
5a = 101.... 

Again we are encountering two positions with I's in both a and 5a, and thus a cannot be 
a solution to (^?T|). 

On the other hand, if a 1 does carry over, then we have 

a= ....011110.. 
4a = ..011110.... 
5a = 110.... 

So again, a cannot be a solution to ([4.1|) . 

Case 3. The block 111 occurs in the binary representation of a. Since we already ruled 
out that 1111 occurs, we may assume that there is a before, and a after 111. We have 

a= ....OHIO.. 
4a = ..OHIO.... 

5a = 

If to the left of the block OHIO we would have a 1, 

a= ....101110.. 
4a = ..101110.... 
5a = ^. . . . 

then, regardless of whether a 1 carries over to the underlined position or not (see Case 2 
for an analogous consideration), we would obtain two positions with I's in both a and 5a, 
and so a cannot be a solution to ( |4.1| ). 

Therefore, the only way to have the block 111 is in the form . . . 001110 .... 

Case 4- The block 0110 occurs in the binary representation of a. Let us first assume 
that we have a 1 on the left of this block, so that we encounter 

a= ....10110.. 
4a = ..10110.... 
5a = ^. . . . 

Now, if no 1 carries over to the underlined position, then we have 

a= ....10110.. 
4a = ..10110.... 
5a = 11.... 



So, there is a 1 in that position in both a and 5a, and there is a 1 just left of that position 
in 5a. By what we observed earlier, such a number a cannot be a solution to ( [4.1| ). If 1 
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does carry over to the underlined position, then we have 

a= ...xlOllO.. 
4a = ..10110.... 



5a = ...ylOO. ... 



where either x or y equals 1. Again, a cannot be a solution to (|4.1| ). 

Therefore, the only way to have a block 0110 is in the form . . . 00110 .... 

At this point, let us summarize our observations. The conclusions from the considera- 
tions in Cases 1-4 are that the (cyclic) binary strings of length d for a that we are looking 
for must be built out of the blocks 00111, 0011, and 01, with possibly filling O's placed in 
between. 

It is not difficult to see that it is only possible to insert filling O's in one place in a 
(cyclic) binary string. For, otherwise we would have at least two instances of a 1 in the 
same place in a and 5a. For the same reason, if a block 00111 occurs, then it can appear 
only once, and no filling O's are allowed. Finally, it is easy to see that an all string, or 
a string built out of blocks of the form 0011 plus filling O's, or a string where filling O's 
are adjacent to two consecutive I's, does not give a solution to ( [4.1| ). All the remaining 



possibilities are indeed covered by the construction in the statement of Proposition 
This concludes the proof of the proposition. □ 

Proposition [4.1| yields the following formula for the number BQ^d) of solutions to ( [4.1| ). 

Theorem 4.3. Write AQ{d) = BQ{d)/d, where B^ld) is the number of solutions mod 
2"^ — 1 to equation ( [1.1| ). Then for d> 6, A^i^d) satisfies the recurrence 

A(i{d) = Aeid - 2) + Aeid - 4) + 1, (4.4) 

with initial conditions Aq{2) = 0, ^6(3) = 1, ^6(4) = 1, ^6(5) = 3. Equivalently, for any 
positive integer m we have BQ{2m) = 2m{Fm — 1) and BQ{2m + 1) = (2m + l){2Fm — 1), 
where Fn is the n-th Fibonacci number {Fq = Fi = 1). 



Proof: Clearly, the recurrence ( |4.4|) can be viewed as a recurrence for the number 
BQ{d)/d of strings that are constructed in Step 1 of Proposition ^A\ , i.e., before appending 
O's and rotating the obtained strings of length d. (There are BQ{d)/d such strings, since 
due to the particular form of the strings, all the d rotations in Step 3 are indeed different 
from each other.) 

On the basis of this observation, it is easy to demonstrate the recurrence {\i.4\ ). For, 
given d, the strings that are constructed in Step 1 can be separated into three sets: first, 
there is the string 01 of length 2, then there is the set of strings of length greater than 
2 with leftmost block 01, and finally there is the set of strings with leftmost block 0011. 
The former set of strings can be obtained by performing Step 1 with d replaced by d — 2 
and then appending 01 to the left of each of the obtained strings. The latter set of strings 
can be obtained by performing Step 1 with d replaced hj d — 4 and then appending 0011 
to the left of each of the obtained strings. Summing, we obtain the recurrence ( [4. 41 ) for 
BQ{d)/d. 

From the recurrence, the explicit formulas for BQ{d) in terms of Fibonacci numbers 
follow immediately. □ 
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As a corollary, we have the following result on the 2-ranks of those cyclic difference sets 
constructed from the Segre hyperovals. 



Corollary 4.4. Let d he an odd integer, d>'b, and let Dq^^ be the {2'^— 1,2'^ ^ — 1,2'' ^ — 1 



cyclic difference set in F*^ corresponding to the Segre hyperoval D(x ), as in Theorem ^ 
with k = 6. Let D^ d be the complement of Dq ^ in F*^. Then the 2-rank BQ{d) of D^^d is 
equal to d{2Fi^d-i)/2 — 1); where Fn is the nth Fibonacci number {Fq = Fi = 1). 



Proof: This is immediate from Theorem 13.61 and Theorem E73|. □ 



Next we turn to the computation of the 2-ranks of the cyclic difference set arising from 
the two types of Glynn hyperovals. According to Theorem P^ , ( |2.4| ) and (f^.S]), we need 
to compute the number Bk{d) of solutions a mod 2*^ — 1 to 

s{a) + s{{k - l)a) = s{ka) + 1, (4.5) 

where d is odd, d>7, and A; = a + 7 or A; = Sa + 4, with a = 2('^+^)/2^ and 7 = 2(^"'+^)/'^ 
if c? = 1 mod 4, whereas 7 = 2*^''"'"^^/^ if = 3 mod 4. These are much more difficult 
problems than the counting problem in the case k = 6. We resolve them in Theorems ^]6| 
and f4.8| by making appeal to the so-called "transfer matrix method" (see Sec. 4.7]). 



(We could have proved Theorem ^]3| by means of the transfer matrix method as well. We 



preferred to take the more direct approach via Proposition |4.1| .) 

In the proofs of Theorems and we will make use of the result (in the folklore) 
that when it is known (by some abstract means) that a sequence satisfies some linear 
recurrence, and when a bound for the order of the recurrence is also known, then one 
needs only to check a certain number of special instances of a specific recurrence to prove 
that the sequence satisfies this recurrence "always" . We give the precise statement in the 
lemma below. For the sake of completeness, we also supply a proof. 

Lemma 4.5. Let (/„)n>o be a sequence of complex numbers. Suppose that we know 
that the generating function Yln>o fn^'^ f^^ '^he sequence is rational, i.e., that it equals 
p{z)/q{z), where p{z) and q{z) are polynomials in z, and that the degree of the numer- 
ator, p{z), is at most P, and the degree of the denominator, q{z), is at most Q. If the 
sequence {fn) satisfies the recurrence 

k 



aifn-i = c (4.6) 



j=0 



for n = Uq, . . . ,N, where > k, N = max{P-|-fc-|-l, Q + n^}, and where aQ,ai . . . , and 
c are some given complex numbers, then the recurrence ( |4.6| ) is satisfied for all n > uq. 



Proof: Since ( |4.6| ) is satisfied for n = n^, . . . , N, we have 

a{z) fnz"" = r{z) + c/(l -z) + z'^+'Siz), (4.7) 



n>0 



where a{z) = ^j^o*^*^*' ^(^) ^ polynomial of degree less than uq, and S{z) is some 
formal power series, the coefficients of which "measure" how (|4.6|) fails for n > N. In 
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particular, S{z) vanishes if and only if ( ^.6| ) holds for all n > uq. Now we multiply both 
sides of ( [4 .71 ) by (1 — z)q{z). This gives 

(1 - z)a{z)p{z) = (1 - z)q{z)r{z) + cq{z) + z^+\l - z)q{z)S{z). 

In this equation, the term on the left-hand side and the first two terms on the right-hand 
side all have degree less than + 1. It follows that z^~^^{l — z)q{z)S{z) = 0, whence 
S{z) = 0. This completes the proof. □ 

Now we are ready to determine the number of solutions to ( [4 .51 ) for the Glynn cases. 
We start with the Glynn type (II) case because it is easier to handle. 

Theorem 4.6. Let d he an odd integer, c? > 3. Let B^„j^4,{d) he defined as in the first 
paragraph of this section, and let A^(jj^i{d) = B^(jj^i{d) / d. Then 

A^a+A{d) = A3.+,{d - 2) + 3As^+^{d - 4) - Asa+^{d - 6) - As.+,{d - 8) + 1, (4.8) 

for all odd d, d> 11, with initial values as given in Tahle 1. 



Proof: First of all, from the proof of Proposition [4.1| , we see that the solutions a, 
< a < 2^^ — 1, to equation ([4.5|) are characterized by the following property (the pertinent 



considerations in the proof of Proposition [4.1| are valid for generic k, i.e., they do not 
restrict to the case A; = 6): 

( [4. 91) There is exactly one instance of a 1 occurring at the same place in a and {k — l)a, 
and immediately to the left of those I's there is a in both a and {k — l)a, 

where we view a and {k — l)a (mod 2*^ — 1) as binary strings of length d. 

We are actually concerned not with the number Bk{d) of all solutions to ( [4.5|) , but 
rather with Ak[d) = Bk{d)/d. Since any solution a immediately gives rise to d solutions 
by forming all possible rotations of a, we may, without loss of generality, restrict our 
attention to those solutions a where the instance of a 1 imposed by ( [4.9|) occurs exactly in 
the middle of the string. The number Ak{d) then is the number of these special solutions. 

Now, for a proof of the theorem, we define a bijection between these special solutions to 
( |4.5|) (with A; = 3(7 -|- 4, where a = 2^'^'^^^^'^) and a set of closed walks in a certain directed 
graph D. As we demonstrate at the end, it then follows from first principles that the 
generating function for the number of these closed walks, and hence for the number of 
solutions to (|4.5|), is rational (see also [^, Sec. 4.7]). Finally, we check ( ^.8| ) for enough 
(odd) values of d so that Lemma ^.5| will imply that ( |4.8| ) has to hold for all odd d > 11. 



In order to motivate the construction of the aforementioned directed graph D, we 
analyse, for a given special solution a to ([4. 5]), the computation of {k — l)a and ka mod 
2'^ — 1. Let d = 2r — 1, with r > 2, and let the binary representation of a be a2r-2 ■ ■ ■ aido- 
Since fc-l = 3(T + 3 = 3- 2^"^+^^/^ + 3 = 2''+^ + 2'^ + 2 + 1, we may compute {k - l)a and 
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ka = {k 



l)a + a mod 2*^ 


— 1 as 


follows: 








a = 




ar 


ar-l 


ar-2 


ao 


2a = 


fl2r-3 


ar-l 


O'r-2 




0'2r-2 


2''+^a = 




a2r-2 


02r-3 


a2r-i ■ ■ 


ar-2 


Ta = 


aj.-2 


Oo 


0'2r-2 


0'2r-3 ■ ■ 


ar-l 


(k - l)a = 


y2r-2 


Vr 


Vr-l 


yr-2 ■ ■ 


yo 


a = 


0'2r-2 


ar 


ar-l 


ar-2 


ao 


ka = 


Z2r-2 




Zr-l 


Zr-2 


Zo 



+ 



+ 



(4.10) 



where 



+ Cli-l + O'r+i-2 + Clr+i-1 + h-l 

yi + ai + Ci-i 



y-i + '2bi, 
Zi -\- 2cj, 



for i 
for i 



0,1 2r 



0,1, 



2r 



2, 
2, 



(4.11) 
(4.12) 



for some integers 6j, Cj with < bi < 3, z = 0, 1, . . . , 2r — 2, c^-i = 1, and Cj = for 
i = 0, 1, . . . , r — 2, r, . . . , 2r — 2, with the convention that indices are read modulo 2r — 1 
throughout. The integer hi is the carry-over from the zth place to the {i + l)th during the 
addition that gives {k — l)a in ([4.10|) , while Cj is the carry-over from the ith place to the 
{i + l)th during the addition of {k — l)a and a in ( [4.10D that gives ka. Here, places are 
counted from the right starting with 0; for example, in the top row of (^4.10 ), the digit 
is in the 0th place and the digit ai is in the 1th place. (Indeed, as is not difficult to see, 
there is a unique such choice of foj's and q's which satisfy ([4.11|) and ( [4.12| ) such that the 
l/j's and Zj's are the digits in the additions given by (f4.10|) .) Equation ( [4.12|) , together 
with the above assignments for the Cj's, reflects the conditions imposed by ( |4.9| ) with the 
I's in the middle place. 

The subsequent considerations become more transparent, if in ( 4.11 ) and ( [4.12| ) we 
perform a relabelling. Given a sequence (a;j)i=o,...,2r-2, where (xj) can be any of (oj), (hi), 

Note that since 



(r-l)j- 



(cj), {ui), or (zj), define the new sequence (a;j)j=o,...,2r-2 by Xj := x 
(r — l,(i) = (r — l,2r — 1) = 1, the sequence (5:j)j=o,...,2r-2 is a permutation of (xj)j=o,...,2r-2 
(recall that indices are read modulo 2r — 1). Now, by putting i = (r — l)j, equations 
( |4.11| ) and ( ^.12| ) read, in terms of the transformed sequences. 



aj + aj+2 + ctj+s + + &j+2 = yj + 26j, for j = 



. - 0,l,...,2r-2, 

yj + ^3 + Cj+2 = Zj + 2cj, for j = 0, 1, . . . , 2r - 2, 



1, and Cj 



(4.13) 
(4.14) 

= for 



where 6j, Cj are integers with < 6j < 3, j = 0, 1, . . . , 2r — 2, ci 
j = 0, 2, 3, . . . , 2r — 2, where again all indices are viewed modulo 2r — 1. 

Construct a directed graph D as follows. The set of vertices of D is the set of all vectors 
(a', a", a'", 6', 6", c', c") with < a', a", a'" < 1, < 6', h" < 3, and < c', c" < 1. 

Corresponding to any special solution a, < a < 2^^ — 1, to equation ( |4.5| ) with 
/c = 3a + 4, define (in the notation of ( [4.13| )-( |4.14| )) the 2r — 1 vertices 



(4.15) 



< j < 2r — 2. Our construction of the directed edges will be motivated by the desire 
to obtain, via equations ( [4.13[ ) and ( [4. 141 ), a bijection between the special solutions a and 
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certain closed walks in D of length d = 2r — 1. A solution a will correspond to the walk 

Vo Vi V2 ^ V2r-2 ^ ^^0, (4.16) 

and vice versa. 

We connect a vertex (a', a", a'", b', b", c', c") to a vertex {A', A", A'", B', B" , C, C") by a 
directed edge if and only if 

a" = A', (4.17) 

a'" = A", (4.18) 

b" = B', (4.19) 

c" = C, (4.20) 

Y := (a' + a'" + A'" + a" + B" - 2b') G {0, 1}, (4.21) 

(y + a' + C" - 2c') e {0, 1}. (4.22) 

To motivate the construction of such directed edges, the reader should think of (a', a", a'", 
b',b",d,c") and {A' , A" , A'" , B' , B" ,C' ,C") as Vj = {dj,dj+i,dj+2,bj,bj+i,Cj,Cj+i) and 
Vj+i = (flj+i, dj+2, a.j+3, 6j+2, Cj+i, Cj+2), respectively, j = 0, 1, . . . , 2r - 2, and should 
observe that (|]^) reflects ( p^ ), and that (g]^) reflects ( pi|) . 



Define the sets Vq, Vi, V2 as the sets of vertices (a', a", a'" , b' , b" , c', c") for which (c', c") 
equals (0, 0), (0, 1), (1, 0), respectively. With these definitions, we claim that for odd d > 3 
the special solutions a, < a < 2*^ — 1, to equation ([4. 5]) with k = 3a + 4 are in bijection 



with the special closed walks of length d which start in Vi, in the first step move to V2, 
and from there on visit only vertices from Vq, until they return to the starting vertex from 
Vi. We leave it to the reader to check the claim in detail, as this is a straightforward task 
(cf. (CT) and (iHD). 



Finally, let be the adjacency matrix of D restricted to the information about edges 
from Vi to Vj, i,j G {0, 1, 2}, that is, Aij is the matrix with rows labelled by the vertices 
from Vi and columns labelled by the vertices from Vj, with an entry 1 in some row and 
column whenever that particular vertex of Vi is connected to that particular vertex of 
Vj, all other entries being 0. Then, by basic principles (which are easily verified from 
scratch), the number of the above defined special closed walks of length d is equal to the 
trace of A12A20AQQ ^Aqi. Hence, by means of our bijection between special solutions to 
( [4. 51 ) and special closed walks in D, we have 

^3.2.+4(2r - l)z'-' = tT(f2 A^2A2oAliAolZ^^ 

r>2 ^ j=0 ^ 

= tr f Ai2A2o(i" - A2o2)"'Aoiy (4.23) 



We would be done if we could compute the expression on the right-hand side of ( [4.23| ). 
However, the matrix Ago is a 128 x 128 matrix, and with today's technology it is still not 
easy to compute the inverse of a 128 x 128 matrix, such as {I — J^q^z), which has the 
indeterminate z sitting inside. We circumvent this difficulty by appealing to Lemma E^. 



On the right-hand side of ( [4.23| ) we have the trace of a matrix, all the entries of which 
are rational in z. Hence, the right-hand side, and so also the left-hand side, is rational 
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in z. Taking into account that the matrix Aqo is a 128 x 128 matrix, we see that we 
may write the left-hand side as p{z)/q{z) where the degree of p{z) is at most 127 and 
the degree of q{z) is at most 128. Now we are in the position to invoke Lemma |4.5| , 



with uq = k = A, P = 127, Q = 128, once we are able to verify the recurrence ( [4. 81 ) for 
d = 11, 13, ... , 267. In view of our characterization of A^f^^^^d) = y43.2r-+4(2r — 1) as the 
trace of A12A20A00 ^^oi, this is routinely performed on a computer^. 

Thus, the proof of the theorem is complete. □ 



By combining Theorems and |3.6| , we are now able to precisely determine the 2-ranks 
of the difference sets corresponding to the Glynn type (11) hyperovals. 

Corollary 4.7. Let d be an odd integer, d > 3, and set a = 2^'^'^^^^'^. Let D^^^^^ d he the 
(2^ — 1, 2'^~^ — 1, 2"^^^ — 1) cyclic difference set in F*^ corresponding to the Glynn type (II) 
hyperoval D{x^''~^*), as in Theorem |2.5|. Let D^cr+i^ be the complement of D^^+^ d in "^Id- 
Then the 2-rank B-^^^^^d) of D^^+^ a equals dA^^^^^^d) , where A-^^+^^S) = 1, A^^^^i^d) = 1, 
^3o-+4(7) = 5, y43o-+4(9) = 7, and for d > 11, A3f^+4^{d) satisfies the recurrence ([4.81). 

Next we turn to the Glynn type (1) case. 

Theorem 4.8. Let d be an odd integer, d > 3. Let Bcr+f{d) be defined as in the first 
paragraph of this section, and let Acr+.y{d) = Bcr+f{d)/d. Then 

A^+^{d) = A^+^{d - 2) + A^+^{d - 4) + A^+^{d - 6) + A^+^{d - 8) - 1, (4.24) 

for all odd d, d> 13, with initial values as given in Table 1. 



Proof: We proceed in the spirit of the proof of Theorem |4.6| . Here we regard Af^^^(d) 
as the number of special solutions a, < a < 2^^ — 1, to ( |4.5| ) (where = cr + 7) with 
the instance of a 1 imposed by ( |4.9| ) occurring exactly at the mth place if = 4m — 1, 
and exactly at the (3m + l)th place if = 4m + 1 (where, again, we count places from 
the right starting with 0). We will define a bijection between these special solutions and 
certain closed walks in a directed graph D. 

We distinguish between the cases d = 4m — 1 and d = 4m + 1, noting that 7 is defined 
differently in these two cases (see ( p.4|) ). 

First let d = 4m — 1, m > 2. In this case we have cr = 2^"* and 7 = 2*", by ( p.4|) . 

We analyse, for a given special solution a to (|4.5| ), the computation of {k — l)a and 
ka mod 2'^ — 1 = 2^™""^ — 1. Let the binary representation of a be 04.^-2 • • • o-iQ-o- Since 
k = a + J = 2^™ + 2"*, we may compute ka in the following two ways: 

+ 



22™a = 


02m-2 ■ 


0"m 


Om—1 


■ do 


Oim-2 ■ 


■ OSm-l 


0'3m-2 ■ 


■ a2m-l 


2'"a = 


OZm-2 ■ 




a-2m-l • 




Q-m— 1 


ao 


fl4m-2 • 




ka = 


Zim-2 ■ 






■ Z2m 


Z2m-l ■ 


Z"m 


Z-m—l 


Zq 



(4.25) 



^ Maple and Mathematica codes for generating the matrices Aqq, Aqi, 
A12, A20 can be obtained on request from the authors, or by WWW at 



tittp : //radon. mat .univie . ac . at/People/kratt/artikel/glynn. html. The verification of (4.8) 



for d = 11, 13, . . . , 267 took 8 minutes on a Pentium with 133 MHz. 
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and 



{k-l)a= yAni-2 ••• ySm y-im-l ••• y2m 
a = a4m-2 • • • dSm dSm-l ■ ■ ■ 0,2m 


Z/2m-l • • • 
a'2m-l ■ ■ ■ 


Vm 


ym—i 

^iri—l 


•••1/0 

. . . ao 


ka = Z4m-2 ■ ■ ■ ^Sm ^3m-l • • • ^2™. 


Z2m-1 ■ ■ ■ 


Zm 


Zm—1 


• • • Zo 


where 










Oi + CLm+i + ^2m+i-l = ^2m+i + 262m+i; 


for z = 0, 


1,.. 


, 4m — 


2, 


y2m+i + 02m+i + C2m+i-l = ^2m+i + 2C2m+i5 


for i = 0, 


1,.. 


, 4m — 


2, 


for some integers 6j, q with 0<6j<l,'i = 0, 1,... ,4m — 


2, c, 


n 1) 


and Cj 



+ 



(4.26) 



(4.27) 
(4.28) 
= for 

i = 0,1, ... ,171 — 1,171 + 1, ... , 4m — 2, with the convention that indices are read modulo 
4m — 1 throughout. The integer 6j is the carry-over from the ith place to the [i + l)th 
during the addition displayed in ( [4.25| ) that gives ka, while Cj is the carry-over from the 



ith place to the {i + l)th during the addition displayed in ( [4.26| ) that gives ka. (Again 



it is not difficult to see that there is a unique such choice of 6j's and q's which satisfy 
( |4.27| ) and ( |4.28| ) such that the yi's and Zj's are the digits in the additions given by ( [4.25| ) 
and ( |4.26| ).) Equation ( [4.28| ), together with the above assignments for the q's, reflects 
the conditions imposed by ([4.9|) with the I's in the mth place. 



Next, as in the proof of Theorem ^.6| , we perform an appropriate relabelling of indices. 
Given a sequence (a;i)j=o,...,4m-2, where (xj) can be any of (oj), (6j), (q), (yi), or (zj), define 



the new sequence 



X 



j)j=0,...,4m-2 



by Xj :-- 



Xmj- Note that since {m,d) 



(m, 4m 



the sequence (5:^)^=0,. ..,4m-2 is a permutation of (a:j)i=o,...,4m-2 (recall that indices are read 
modulo 4m — 1). Now, by putting i = mj, equations ( [4.27] ) and ( |4.28| ) read, in terms of 
the transformed sequences. 



aj + ttj+i + bj-2 = Zj+2 + '2bj 

yj+2 + 5j+2 + Cj-2 = Zj^2 + 2c 

where < bj < 1, j = 0, 1, 



+2, 



■j+2) 



for j 
for j 



0,1, 
0,1, 



, 4m 
, 4m 



(4.29) 
(4.30) 



, 4m 



2, £i 



1, and Cj = for j = 0, 2, 3, . . . , 4m — 2, 
where again all indices are viewed modulo 4m — 1. 

We now interrupt the proof for the case d = 4m — 1 and turn for a moment to the case 
= 4m + 1, m > 1. Then we have a = 22™+i and 7 = 2^""+^, by (IT 



Again, we analyse, for a given special solution a to ([4.5|) , the computation of {k — l)a 
and ka mod 2^^ — 1 = 2^™+^ — 1. Let the binary representation of a be a^rn ■ ■ ■ aido. Since 
/c = cr + 7 = 2^™+-'^ + 2^"^~^^, we may compute ka in the following two ways: 

23m+l^ 



flm-l • • • CtQ 0-4m ■ ■ ■ Q-3m+l O-'im. ■ ■ ■ 0'2m+l 0'2m ■ ■ ■ 0"m 

22m-\-l 

a = Q-2m-l • • • Q"m O-m-l • • • Qp CLjin ■ ■ ■ O-Sm+l Q-Sm ■ ■ ■ Q-2m 

ka 2^4m • • • ^^Sm+l ^3m • • • Z2m+1 Z2m ■ ■ ■ • • • Zq 



+ 



and 

{k-l)a 
a 
ka 



y4m 
a^fn 



ysm+i ysm 



y2m+l y2m 
0'2m+l Q-2m 



l/m+1 ym 



yo 

ao 



+ 



(4.31) 



(4.32) 



^3m+l ^3m 



^2m+l ^2% 



Z-, 



m+1 



Zn 
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where 

tti + ai_rn + hm+i = Z2m+i+l + '^hm+i+i, for i = 0, 1, . . . , 4m, (4.33) 

y2m+i+l + a2m+i+l + C2m+i = ^2m+i+l + 2C2m+i+l, for i = 0, 1, . . . , 4m, (4.34) 

for some integers hi, Ci with < bi < 1, i = 0,1,..., 4m, csm+i = 1, and Cj = for 
i = 0, 1, . . . , 3m, 3m + 2, . . . , 4m, with the convention that indices are read modufo 4m + 1 
throughout. The integer bi is the carry-over from the ith place to the (i + l)th during the 
addition displayed in ( ^.31| ) that gives ka, while Cj is the carry-over from the zth place 



to the {i + l)th during the addition displayed in (4.32) that gives ka. (As in the similar 



places before, there is a unique such choice of fej's and q's which satisfy ( [4.33| ) and ( ^.34| ) 



such that the yi's and Zj's are the digits in the additions given by ( |4.31| ) and (|4.32| ). 



Equation (^4.34|), together with the above assignments for the q's, reflects the conditions 



imposed by ( [4. 9] ) with the I's in the (3m + l)th place. 

Next, we perform an appropriate relabelling of indices. Here, given a sequence 
(a;i)j=o,...,4m, where (x^) can be any of (a^), (k), (q), (y^), or (zj), define the new se- 
quence (a;j)j=o,...,4m by Xj := x^mj- (Note the difference from the previous relabelling.) 
Note that since (— m, d) = (m, 4m + !) = !, the sequence (a;j)j=o,...,4m is a permutation of 
(xi)j=o,...,4m- Now, by putting i = —mj, equations (|4.33| ) and ([4.34|) read, in terms of the 
transformed sequences, 

CLj + dj+i + 6j_2 = Zj+2 + 26j+2, for j = 0, 1, . . . , 4m, (4.35) 
yj+2 + dj+2 + Cj_2 = Zj+2 + 2cj+2, for j = 0, 1, . . . , 4m, (4.36) 

where < bj < 1, j = 0,1, ... , 4m, ci = 1, and Cj = for j = 0, 2, 3, . . . , 4m, where again 
all indices are viewed modulo 4m + 1. 

Very conveniently, equations ( |4.35| )-( ^^ ) are identical with equations ( [4.29| )-( ^75nD , so 
that from now on we can treat the cases d = 4m — 1 and d = 4m + 1 simultaneously. 

Construct a directed graph D as follows. The set of vertices of D is the set of all vectors 
[a', a", b', b", b'", b"", d, c", d", d'") with < a', a", b', b", b'", b"", d, c", d", d'" < 1. 

Corresponding to a special solution a, < a < 2"^ — 1, to (|4.5|) with k = a + 'j, define 
(in the notation of (^) -(CT) / (ra)-(F36D ) the d vertices 



V 



{ttj, Oj+i, bj_2, bj-i, bj, bj^i, Cj_2, Cj_i, Cj, Cj+i), (4.37) 



< j < d — 1. Our construction of the directed edges will be motivated by the desire to 
obtain, via equations (|4.29|) and (|4.30|) , a bijection between the special solutions a and 



certain closed walks in D of length d. A solution a will correspond to the walk 

Vq vi > Vd_i vq, (4.38) 



and vice versa. 
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We connect a vertex (a', a", 6', 6", 6"', 6"", c', c", c'", c"") to a vertex {A', A", B' , B", B 
B"\ C", C'\ C"\ C"") by a directed edge if and only if 



/// 

5 





a" = A!, 


(4.39) 




h" = B', 


(4.40) 




b'" = B'\ 


(4.41) 




b"" = B'", 


(4.42) 




c" = C", 


(4.43) 




c'" = C", 


(4.44) 




c"" = C", 


(4.45) 


Z ■= {a' + a" + 


b' - 2B"") e {0, 1}, 


(4.46) 


{Z + 2C"" 


-A"-c')e{OA}. 


(4.47) 


The reader should think of (a', a", 6', 6", 6"' 


, b"", c', c", c'", c"") and {A', A", B', B", 


B'", B"\ 


C", C", C", C"") as = (a^-, a^+i, 6j_2, 


1, 6j, Cj_2? Cj_i, Cj, Cj+i) and Vj^i 


= (Sj+i, 



aj+2, bj-i, bj, bj+i, bj+2, Cj-i, Cj, Cj+i, 9+2), respectively, j = 0, 1, . . . , d-1. Equation ([4.46|) 
reflects j^^/jW^, and equation (g^^) reflects (|O0|)/(^:36|). 



The remainder of the proof proceeds just like the proof of Theorem |4.6| . We define 
sets V^o,V^i,V^2,V^3,V^4 as the sets of vertices {a',a",b',b",b"',b"",c',c",c"',c"") for which 
{c',c",c"',c"") equals (0,0,0,0), (0,0,0,1), (0,0,1,0), (0,1,0,0), (1,0,0,0), respectively. 
As is easy to see, for odd d > 3 the special solutions a, < a < 2^^ — 1, to equation 
( [1.5D with = 0" + 7 are in bijection with the closed walks of length d which start in 
Vi, in the first step move to V2, in the next step move to V3, then move to V4, and from 
there on visit only vertices from Vq, until they return to the starting vertex from Vi. In 
an analogous manner we define matrices A12, A23, A34, A40, Aqo and Aqi, and obtain a 
rational expression for the generating function for the sequence {Acr+'y{2r + l))r->2 in the 
form 

^ A,+,{2r + l)z'-2 = tr Ai2A23A34A4oA^^oAoiZ^') 

= tr |^Ai2A23A34A4o(/ - Alf^z)-^Ao?j . 

This time the matrix Aqo, the adjacency matrix of D restricted to Vq, is a 64 x 64 matrix. 
Therefore, in order to invoke Lemma [4.5| , it suffices to verify the recurrence ( [4.24| ) for 
d = 13, 15, ... , 141. This is again routinely performed on a computer^. This establishes 
( ^ ) for all odd d, d > 13. 



Now the proof of the theorem is complete. □ 



^ Maple and Mathematica codes for generating the matrices Aqq, Aqi, A12, 
A23, A34, A40 can be obtained on request from the authors, or by WWW at 



tittp : //radon, mat .univie . ac. at/People/kratt/artikel/glynn. html. The verification of (4.24) for 



d = 13, 15, . . . , 141 took 15 seconds on a Pentium with 133 MHz. 
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By combining Theorems and |3.6|, we are now able to precisely determine the 2-ranks 



of the difference sets corresponding to the Glynn type (I) hyperovals. 

Corollary 4.9. Let d be an odd integer, d > 3, and set a = 2(^^+1)/^ 7 = 2'^^'^+'^^/'^ if 
ci = lmod4, and = 2^'^+'^^/^ z/rf = 3mod4. Let D^+^^d be the (2'^ ~1,2'^~^ -1,2'^-'^ -1) 
cyclic difference set in F*^ corresponding to the Glynn type (I) hyperoval D{x'^^'^), as in 
Theorem p^.5| . Let Dcr+^^d be the complement of Du^^^d in F*^. Then the 2-rank Bcr+^{d) 
of D^+^^d equals dA^+^{d), where ^,^+^,(3) = 1, ^4^+^(5) = 1, A„ +^{7) = 3, ^4^+^,(9) = 7, 
y4o-+^(ll) = 13, and for d > 13, A„+^{d) satisfies the recurrence ( |4.24|) . 

5. Binary cyclic codes of difference sets arising from Segre hyperovals 



The next two propositions give some further applications of Proposition |4.1| . Let 
^2(064) be the binary cyclic code of -Dg.d, as defined near the beginning of Section 3. 
Define 6{x) (viewed as a polynomial over F2) by 



9ix) = J2 h 

j=0 

where 60,^15 • • • ,^2^-2 denotes the characteristic sequence of -De,^. By suitably ordering 
the elements of -De,^, we may choose a (fixed) generator a of F*^ such that bj = 1 if 
and only if e D6,d- The significance of 6{x) is that its greatest common divisor with 
^2'*-! _ X ig ii^Q generator polynomial of the binary cyclic code C2(-D6,d)- The zeros of 9{x) 
in F*d (i.e., the zeros of the generator polynomial) are called the zeros of C2(-D6,d). The 
remaining elements of F*^^ are called the nonzeros of C2(-D6,d). Observe that for such a 
nonzero u, we have 6{u) = 1, since D^ d is invariant under the d automorphisms of F2d. 

Proposition 5.1. Let d be an odd integer, d > 3, and let D^ d be the {2'^ — 1,2^^^^ — 
1,2'^^^ — 1) cyclic difference set in F*^ corresponding to the Segre hyperoval D{x^), as in 
Theorem^^ with k = 6. Let C2{D^^d) be the binary cyclic code of D^ d- Then the nonzeros 
of C2{D(,^d) o,re 1, where a is the primitive element ofW*^ defined above, and a runs 

through all the solutions of (^.1|) given explicitly in Proposition [4.1|. 



Proof: Clearly 1 is a nonzero of C2(-D6,d) because the cardinality of D^ d is odd. For p 
a prime ideal in Z[^2d-i] lying over 2, let u = Uphe the Teichmiiller character on F2ti. By 
definition of 6{x) and a, we see that a*, < z < 2*^ — 2 is a nonzero of C2{DQ d) if and only 
if cu* {D^ d) (mod p) 7^ 0. From the proof of Theorem |3.6| , we see that for < a < 2^^ — 2, 
^-5a i^D^ Jj (mod p) 7^ if and only if s(a) + s(5a) = s(6a) + 1. Therefore the nonzeros 
of C2(-D6,d) are where a runs through the solutions of (|4.1|) . This completes the 

proof. □ 

Example 5.2. Let 1^6,9 be the (2^ — 1,2® — 1,2'' — 1) cychc difference set in F*g corre- 
sponding to the Segre hyperoval D{x^), as in Theorem with k = 6. Let C2(-D6.9) be 
the binary cyclic code of D^ g. By Proposition ^ and Example 5^, we know that the 



Tir,Ti'70T-r,Q r,f m aroT ^,,-5-2' ^,-25-2' ^,-77-2' „ -117-2" ^,-9-2" ^,-19-2' ^,-7-2* ^,,-37-2' 

nonzeros oi V2{jyQ^9) are i,Q; , en , en , oi , en , oi , en , en , 
and where i = 0, 1, 2, . . . , 8. A simple computation shows that a, a^, a^, . . . , 

are zeros of C2{Dqq). By the BCH-bound p. 201], the code C2{DQg) is a 21-error 
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correcting code of length 511 and dimension 82 over F2, (with minimum distance at least 
43). 

Let d be an odd integer, d > ?>. Let a be an integer with 1 < a < 2^^ — 2, and let r 
be the smallest positive integer such that T^^^a = a (mod 2'^ — 1). The cyclotomic coset 
containing a consists of {a, 2a, 2^a, . . . ,2'^a}. The solutions of ([4.1D can be partitioned 



into AQ{d) disjoint cyclotomic cosets, each of cardinality d. Let J be a complete set of 
cyclotomic coset representatives of the solutions of ( [4.1|) . We can give a criterion involving 
trace to decide when the equation x^ + x + P = 0, Pe F*^, has two distinct solutions (as 
opposed to no solutions) in F2d. 

Proposition 5.3. Let d be an odd integer, d > 3. Then x^ + x + l3 = 0, (3^ F*^, has two 
distinct solutions in F2d if and only if Tr(^^gj /3^") = 0, where Tr is the trace from F2d 
to ¥2, and J is defined above. 

Proof: By Fourier inversion and the definition of 6{x), 



2^-2 



i=0 



for each j with < j < 2^^ — 2. By Proposition ^.1| , 6{a~^) equals 1 if ? = or i = 5a, and 
otherwise ^(q;~*) equals 0, where a runs through the solutions of ( |4.1| ). The result now 
follows with P = □ 



Example 5.4. Let d = 9. By Example ^ J = {1,5,21,85,13,53,77,167,103} is a 
complete set of cyclotomic coset representatives of the solutions of (^.1|). Therefore x^ + 



x + /? = 0, /3 e F*9, has two distinct solutions in F99 if and only if Tr(/5 + + p'^ + + 

Pl9 + p25 + p37 + p77 + ^117) _ q. 



It is interesting to compare Proposition p.3| with the result (following from Hilbert's 



Theorem 90) that x^ + x + P = 0,P& F*^ has two solutions in F2d if and only if Tr(/9) = 0. 
6. Inequivalence of difference sets arising from hyperovals, quadratic 

RESIDUE difference SETS, AND GMW DIFFERENCE SETS 



In the next theorem, we answer a question raised by Maschietti [21] by showing that 
the difference sets D^d arising from the hyperovals in ( p.l| ), (p.3|), (|2.4|), ( p.5| ) are all 
inequivalent to each other. The difference sets arising from the hyperovals in ( |2.1| )-( pl^ ) 
are of course equivalent for the same d, since as we showed at the end of Section 2, they 
are all Singer difference sets. 

We precede the statement of the theorem by the following auxiliary result which is of 
independent interest. It relates the magnitudes of the 2-ranks of the difference sets arising 
from Segre and Glynn hyperovals. 

Lemma 6.1. With Ak{d) as defined at the beginning of Section 4, we have for each odd 
d>15 that 

Asa+iid) > A^+^{d) > Aeid), (6.1) 
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i.e., the 2-ranks of the difference sets that arise from Glynn type (II) hyperovals dominate 
the 2-ranks of the difference sets that arise from Glynn type (I) hyperovals, which in turn 
dominate the 2-ranks of the difference sets arising from Segre hyperovals. 



Proof: Since A^ld) = 2F(^(i-i)/2 — 1 by Theorem |4.3| , it follows that 

(d+l)/2 2 / _^^(d+l)/2 

Note that (1 + v^)/2 = 1.6181 . . . 

Solving the recurrence ( |4.24| ), we obtain 



where ui, 1^2,^3, are four distinct complex zeros of the polynomial — — ~ z — 1, 
and where ai, 02, 03, 04, are explicitly known complex numbers. The zero with greatest 
absolute value is tui, say, where \uji\ = 1.927561975 . . . 
Solving the recurrence (|4.^), we obtain 



where pi, p2, Ps, P4 are four distinct complex zeros of the polynomial z"^ — z^ — Sz"^ + 2; + 1, 
and where 61, 62, ^Si ^4, ^5 are explicitly known complex numbers. The zero with greatest 
absolute value is pi, say, where |pi| = 2.095293985 . . . 
From these formulas, we see that for odd d > 25, 

A3.+4(rf) > i2('^+i)/2 > A^+,{d) > (1.6181)('^+i)/2 > 

Appealing to Table 1, we see that ( |6.1[ ) holds for odd d > 15. 

This completes the proof. □ 



Theorem 6.2. The difference sets D^ ct arising from the hyperovals in ( p.l|) , ( |2.3|) , (^]4 
( p.5|) are all inequivalent. 



Proof: It suffices to show that the 2-ranks of the complements D^ d in question are 
distinct. Since the difference set Dk^ arising from a regular hyperoval is a Singer difference 
set, the 2-rank of its complement equals d, by Theorem p.5| and the remarks following 



Theorem |3.5| . By Corollary [4.4| , the 2-rank of Dq ^ is dAQ{d) = d{2Fi^d~i)/2 — 1); which 
exceeds d for d > 5. This show the inequivalence for the cases ( p.l|) and (|2.3| ). By Table 1 
and Lemma p.l| , the 2-ranks in all the cases must be distinct. 

This completes the proof. □ 

Let Qd denote the quadratic residue cyclic (2*^ — 1, 2'^~^ — 1, 2^*^^ — 1) difference set in 
F*d |l^, p. 244]. Thus, 2^^ — 1 must be a prime, and Qd = {a"^ : r is a square mod 2^^ — 1, 
0<r<2'^ — 1}, where a generates the group F*^. It is easily checked that Q2 and Q3 are 
equivalent to difference sets arising from the regular hyperoval, while Q5 is equivalent to 
the difference set arising from the Segre hyperoval. We now show that for (odd) d > 7, 
the sets Qd are inequivalent to difference sets arising from hyperovals. 

Theorem 6.3. Let d > 7 be odd. Then the quadratic residue difference sets Qd are in- 
equivalent to the difference sets D^^ arising from the hyperovals in ( |2.1| )-( P^ ) . 
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Proof: As x runs through the (multiphcative) nontrivial characters on F*^, x{Qd) = 
'Ylijs^Q^ xiP) assumes exactly two distinct values z and z, where z is a complex number 
and z is its complex conjugate. If D is any difference set in F*^ equivalent to Qd, then as 
X runs through the nontrivial characters on F*^, x{D) assumes only the values z and z 
up to a factor of a (2"^ — l)-th root of unity. Now assume for the purpose of contradiction 
that the aforementioned D is one of the difference sets Dj^ d in ( |2.1| )- ([2r5| ). In view of 
( p.6| ), it suffices to show that as x runs through the nontrivial characters on W*^, the 
principal ideals in Z[^2'*-i] generated by the Jacobi sums J{XjX'^~^) assume more than 
two distinct values. Thus, by ( ^.101 ), it suffices to show that as a runs through the values 
1, 2, . . . , 2"^ — 2, the expression c(a) := s{a) + s{a{k — 1)) — s{ak) assumes at least three 
distinct values. One checks this as follows. 

For k as in (|2.5|) , c(l), c(— 1), and c(7) are distinct. For k as in (|2.4|) , c(l), c(— 1), and 
c{a + 1) are distinct. For k as in ( |2.tj| ), c(l), c(— 1), and c(3) are distinct. Finally, for k 
as in ( p. ID or ( |2.2|) , c(l), c(— 1), and c{k + 1) are distinct. This completes the proof. □ 



Next we consider GMW difference sets [|rT[]. Suppose that d has the factorization d = uv 
for integers M,f > 1, and write g = 2" (so that 2'^ = q^). Let r be an integer strictly 
between 1 and q — 1 which is relatively prime to g — 1 and which is not equal to a power 
of 2. Define the GMW set 

Gd,.,r = {y G F;, I Tr,/2((Tr,./,(y))'-) = 0}, 

where Tr^D/^ denotes the trace map from ¥qv to Fg. (We did not allow r to be a power 
of 2, for otherwise Gd,v,r would of course be equivalent to a Singer difference set.) Let w 
denote the number of I's in the binary expansion of r (so that 1 < w < u). It is known 
2i] that Gd,v,T is a (2*^ — 1, — 1, 2'^~'^ — 1) difference set whose complement has 2-rank 



uv'^ . (For the p-rank of general GMW difference sets in fields of characteristic p, see [Q.) 
Theorem ^]8| below shows that the GMW sets Gd,v,r are inequivalent to the difference sets 
Dkd in (p.l|)-(p.5D. We will first need four lemmas. 



Lemma 6.4. Write d = uv and g = 2" as above. For each nontrivial multiplicative 
character x on F*^; we have 

where 1/r denotes the inverse of r modulo q — 1, Xi denotes the restriction of x to ¥*, 
and where g and gi denote the Gauss sums over W*^ and ¥*, respectively. 



Proof: We have 



2x{Gd,.,r) = Yl x{y){-i) 



_nTr,/2((Tr,„/,(s,))'-) 



Write 



T = {q^-l)/{q-l), 
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and let a be a fixed generator of F*^, so that every y G F*^ has the form y = a^'^~^\ with 
0<«<g — l,0<j<T. Therefore, since a"^ G F*, 

j=0 i=0 



Thus 
where 

and 



2xiGd,.,r) =A + B, 

T-l 

^ = ^XWx{^'^q-lqW)9l{xT) 
3=0 



j=o i=o y^^* 
I 

To evaluate A, observe that 



Tr,./,(y)=l 

This sum on y is an Eisenstein sum, which is known |Q, pp. 391, 400] to equal g{x) /9i{Xi) 
or —g{x)/(li according as Xi is nontrivial or trivial. Thus 

if Xi is nontrivial, 
if xi is trivial. 



A 



To evaluate 5, observe that B is an Eisenstein sum which is known |^ pp. 389, 391, 
400] to equal 

0, if Xi is nontrivial, 

g{.x){.q. - 1)/?, if Xi is trivial. 
Adding our evaluations of A and i?, we obtain the desired result. □ 



B 



Lemma 6.5. Let v = 3, u > 7 with u odd, q = 2", and d = uv. For an integer a 
not divisible by q" — 1, let s{a) denote the number of 1 's in the binary expansion of the 
reduction of a modulo q" — 1. As in (O), define a = 2^'^'^^^^'^ and 7 = 2'^^'^"'"^)/^ if d = 1 
mod 4, whereas 7 = 2^^^+^)/^ zf d = 3 mod 4. Then for a = {q - 1)(7 + {-1)^''-'^^^), 

s{a) + s(a((j + 7 — 1)) — s(a(cr + 7)) < u. 



Proof: First suppose that d = 3 mod 4. Then it may be checked directly that s{a) = u, 
s{a{a + 7 — 1)) = ((i — l)/2, and s(a(cr + 7)) = (d + l)/2. The result thus follows in the 
case d = 3 mod 4. Next suppose that d = 1 mod 4. Then it may be checked directly 
that s{a) = u, s{a{a + 7 — 1)) = u, and s{a{a + 7)) = 5{d + 3)/12, and the result again 
follows. □ 
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Lemma 6.6. Let d = uv with f = 3 and odd -u > 3. Then every GMW difference 
set Gd,3,r is inequivalent to the difference set -Do-+^,d corresponding to the Glynn type (I) 
hyperoval. 

Proof: The result is easily checked for u = 3 and u = 5, because then the 2-ranks of 
the two kinds of difference sets differ (see Table 1). So let m > 7. Write g = 2" = 2^^/^ Let 
X be any nontrivial multiplicative character on F*^; whose restriction Xi to F* is trivial. 
Thus, if is a Teichmiiller character (of order 2'^ — 1) on F*^; , then x = for an integer 
a divisible by g — 1. 

Suppose that Gd,z,r were equivalent to D^^^^d- Then it would follow from Lemma 
and (1^) that 

for some complex root of unity /i and some integer t relatively prime to 2*^ — 1. Setting 
p = 2 and c? = 3 in the proof of Theorem |2.1| , we see from that proof that 5'(x*) is divisible 
by q in the ring of algebraic integers. Thus J{XjX'^^'^^^) is divisible by q, so that every 
prime ideal occurring in the factorization of J{x,X'^^"'^^) over Z[^2''-i] has an exponent 
> u. Thus by (|310|) , 

s(a) + s(a(cr + 7 — 1)) — s(a(cr + 7)) > u 



for every integer a divisible by g — 1. This contradicts Lemma 6.5, and so the proof is 



complete. □ 

Lemma 6.7. Let u > 5 be odd. Then Aq{3u) is never a power of 3 and Aq{5u) is never 
a power of 5. 



Proof: By Theorem [4.3| , for odd d > 1, 

A(,{d) = 2F(rf_i)/2 - 1. (6.2) 

First suppose that A^ld) is a power of 3 for d = 3u. Then, since A^ld) is different from 
3,9,27 (see Table 1), Ae^d) must be divisible by 81. So by (U), d = 57 + 432a; for 
some nonnegative integer x. Since F„ (mod 109) has period 108, it follows that AQ^d) 
(mod 109) has period 216, and hence Aq{57 + A32x) is congruent to 42 modulo 109 for all 
nonnegative integers x. This is a contradiction, since 42 is not a power of 3 modulo 109. 

Next suppose that AQ{d) is a power of 5 for c? = 5m. Then since A^ld) is different from 
5 and 25 (see Table 1), we have 125 | AQ^d). So by ( |6.2| ), we have d = 585 + lOOOy for 
some nonnegative integer y. Since Fn (mod 251) has period 250, it follows that AQ{d) 
(mod 251) has period 500, and so ^6(585 + lOOOy) is congruent to 235 modulo 251 for all 
nonnegative y. This is a contradiction, since 235 is not a power of 5 modulo 251. □ 

Theorem 6.8. The GMW difference set Gd,v,r is inequivalent to each of the difference 
sets d arising from the hyperovals in ( p.l|) -( py5D . 



Proof: As was mentioned following the definition of Gd,v,r, the complement Gd,v,r has 
2-rank uv'^, where d = uv and 1 < w < u < d. For k as in ( |2.1j ) or (|2.2| ), the difference 



set Dk d has 2-rank d (cf the proof of Theorem |6.2| ). Since u{d/u)^ > d, it follows that 
Gd,v,r is inequivalent to D^^d- 
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Now let d be an odd composite integer > 5. It is easily checked by extending Table 1 
that none of Ae^d), A„+^{d), or A^i^+^^d) can equal {d/u)^~^ for any d < 500. Hence 
assume d > 500. From the proof of Lemma |6.1| , 

A^^+M > 1(2.09) ('^+^)/' > 3^/=^ > > {d/u)'"-\ 

This completes the proof for k as in ( |2.5| ). 

Next, let k be as in (|2.4| ). By Lemma |6l^, Gd,3,r cannot be equivalent to D^^^^d- Hence, 
assume that u < d/b. From the proof of Lemma |6.1| , 

A,+^{d) > i(L92)('^+i)/2 ^ 5^/5 ^ (^/^)-2 > (rf/y)— 1. 

This completes the proof for k as in ( |2.4| ). 

Finally, let k be as in ( p.3| ), i.e., k = 6. By Lemma |6.7| , we cannot have AQ^d) equal 
to {d/u)^~^ with M = d/3 or (i/5 or d/9. Moreover, Ag^d) cannot equal (d/u)"^^^ for 
u = d/7, because it follows from Table 1 and the recurrence ( |4.4| ) that AQ{d) never equals 
7 and is never divisible by 49 for any odd d. Thus assume that u < d/11. From the proof 
of Lemma 



This completes the proof for k as in ( |2.3| ), and hence completes the proof of the theorem. 

□ 

Remark: In the preceding proof, in order to show the inequivalence of GMW sets 
Gci,3,r and the difference sets -Do-+7,d arising from the Glynn type (I) hyperovals, we used 
Lemma instead of a 2-rank argument. We do in fact also have a proof^, which is 



similar in spirit to the proof of Lemma |6.7| , that for odd m > 3 the number Acr^^{3u) is 



never a power of 3, whence also the 2-ranks of Gd,3,r and D^+^^d are distinct. However, we 



prefer the approach via Lemma 6.6, because the aforementioned proof requires extensive 



computer calculations, and because Lemma |6.4| is of independent interest. 

7. 2-RANKS OF CIRCULANT MATRICES 

For integers k > 3 and > 2, let 

f{x) = x'' + x''-\ xe¥l,. 

In Theorem [7.5] , we will determine the ranks over F2 of certain circulant matrices M^, 
defined as follows. Let a denote a generator of the cyclic group F*^ and define the circulant 



matrix 



— (^j,j)l<ij<2'*-l ) 



where rriij denotes the number of a; G F*^^ for which a^~^ = f{x). Note that for each k 
such that D{x^) is a hyperoval in PG{2, 2"^), we have Mk = 2Ak, where Ak is the incidence 
matrix (defined at the beginning of Section 3) corresponding to the difference set Dk^d 
(defined in Theorem |2.5| ), the 2-ranks of which we studied in Section 4. This is because 
the incidence matrix A^ is not affected by changing r(x) (as defined before Lemma [2.4] ) 
from X + x'^ to x'^"^ + x'', since the difference sets D^^d and Dk/^k-i),d are equivalent by 



Lemma 2.3 



^It can be obtained on request from the authors, or by WWW at 



tittp : //radon . mat .univie . ac . at/People/kratt/artikel/glynn.html 
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Let rank2(Mfc) denote the rank of over F2. In Section 4 we were concerned with the 
computation of the 2-ranks of incidence matrices Aj^. Such a matrix can be viewed as 
an adjacency matrix of the directed graph where for two vertices m, v in F*£j, a directed 
edge connects m to u if and only if w/m is in the difference set D^ di i-e., if and only if 
v/u is in the image of r. The following two theorems exhibit values of k for which the 
computation of the 2-rank of is also a 2-rank computation for an adjacency matrix 
Nk of a directed graph, where this time u is connected to v if and only if f/u is in the 
image of /. 

Theorem 7.1. Let d > 1 be odd. Let be the matrix obtained from M5 by replacing 
every nonzero entry with 1. Then rank2(A^5) = rank2(M5). 

Proof: It suffices to show that every nonzero entry of M5 is odd. We will prove the 
stronger result that for each c G W*^, the polynomial g{x) = + + c has either no 
zeros, one zero, or three zeros in F*^. First, if g{x) had exactly two zeros in F*^, then 
g{x) would have an irreducible cubic factor (normal over F2d), so that g{x) would have 
five zeros in F23d . Similarly, if g{x) had four zeros in F*^, then g{x) would have five zeros 
in F*rf. Thus, since 3d is odd, it remains to show that g{x) cannot have fives zeros in F2d 
for any odd d. Assume for the purpose of contradiction that g{x) has fives zeros in F2d. 
Let z denote one of these zeros. Since c is nonzero, z is not or 1. Over F2d, we have the 
factorization g{x) = (x + z)h{x), where 

h{x) =x^ + {z+ l)x^ + (z^ + z)x'^ + {z^ + z^)x + (/ + z^). 

Note that h{0) is nonzero since g{0) is nonzero. We have 

q{x) = (z^ + z^)~^x'^h(z/x) = x^ + + + X + w, 

where w = z/{z + 1). Since h{x) has four zeros in F2d, so does g(x). Write g(x) = 
(x^ + rx + s)(x^ + ux + v) over F2d. Since both of these quadratic factors are reducible 
over F2d, we have Tr(s/r^) = Tr(w/M^) = 0. Note that r and u are nonzero, since q{x) 
cannot have multiple zeros over F2d. We will obtain a contradiction by showing that 
Tr(s/r^) + Tr(f /m^) = 1. Now, r + u = 1, ru + s + v = 1, and su + vr = 1. Thus r = 1 + u, 
u'^ + u + v + l = s, and + u"^ + uv + u + {v + uv) = 1. Hence v = l + u + u'^ + u^ and 
s = u^. Therefore 

s/r^ = mV(1 + u^)=u + 1/(1 + u) + 1/(1 + m)^ 

so that Tr(s/r^) = Tt{u). On the other hand, v/u'^ = {1/u) + (1/u)^ + 1 + u, so that 
Tr(v/u^) = 1 + Tr(M). Thus Tr(f/M^) + Tr(s/r^) = 1, which yields the desired contradic- 
tion. This completes the proof. □ 



The next theorem shows that the conclusion of Theorem 7.1 is valid for all d > I when 



the subscript 5 is replaced by any k of the form 2™ — 1 with m > 1. 

Theorem 7.2. Let d > 1. Set = 2™ — 1 for an integer m > 1, and let Nk be the matrix 
obtained from by replacing every nonzero entry with 1. Then rank2(A'"fc) = rank2(Mfc). 

Proof: It suffices to show that for each c G F*^, the polynomial g{x) = x^ + x^~^ + c 
has either no zeros or an odd number of zeros in F*^. Assume that 2; is a zero of g{x) in 
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¥*a, and note that z is not or 1. We will show that g{x) has an odd number of zeros in 
F*^. We have the factorization g{x) = (x + z)h{x), where 

h{x) = x^-^ + {z + + {z^ + + . . . + {z^-^ + z^-^)x + {z^-^ + z""-^). 

It remains to show that h{x) has an even number of zeros. We have 

q[x) = {z""-^ + z'^-^Y^^-^hiz/x) = x^-^ + x^-^ + ...+X + zl{z + 1). 

Since A; = 2™" — 1, it follows that whenever x is a zero of q{x), so is x + 1. Thus q{x) and 
hence h{x) has an even number of zeros. This completes the proof. □ 

We next give a formula for rank2(Mfc) in terms of s(x), where s{x) is defined above 
Theorem |3]^, with q = 2'^. Define 



[X 



s{x), if(2'^-l)/x, 
d, if (2'^ - 1) I X. 



Theorem 7.3. For integers k > 3 and d > 2, rank2(Mfc) equals the number of a, < 
a < 2'^ — 1, for which 

s{a) + s{{k-l)a) = s*{ka). (7.1) 
Proof: The 2"^ — 1 complex eigenvalues of are 

xGF* . 

2d 

where x ranges over the 2'^ — 1 multiplicative characters on F*^. Let p be a prime ideal in 
Z[^2'*-i] lying over 2, and let u = Uphe the Teichmiiller character on F*^. Then rank2(Mfc) 
equals the number of a, < a < 2^^ — 1, for which 

(cf. Theorem |3.3| ). For < a < 2^^ — 1, we have 

psia)+s{{k-l)a)~s* {ka) || J(^(^-«^ 

(cf. (13.101) ), since J{u~"',u''^''^^^"') is a unit if ka or (k — l)a is divisible by 2"^ — 1. The 
theorem now follows. □ 

Let Rk{d) denote the number of solutions a, < a < 2^^ — 1, to equation ([7.1|). Thus 
by Theorem [7.3| , Rk{d) = rank2(Mfc). The reader should observe the similarity of the 
problems of determining Rk{d), the number of solutions a, < a < 2'^ — 1, to equation 
([7.1[), and of determining Bk{d), the number of solutions a, < a < 2^^ — 1, to equation 
( ^.81 ). In the case of Bk{d) = dAk{d) we obtained linear recurrences for all relevant values 
of k (see ( |4.4| ), ( |4.24| ), ( |4.8| )). The next proposition shows that linear recurrences exist for 
the Rk{d) as well. We omit the proof, as the proposition can be proved by an approach 
similar to the one we used in the proofs of Theorems [4.6| and I 
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Proposition 7.4. Let k be a fixed integer > 3. The generating function Yld>2^k{d)z'^ 
for the numbers Rk{d) of solutions a, < a < 2'^ — 1, to equation ( |7. 1| ) is a rational 
function in z, and, hence, the sequence {Rk{d))d>e satisfies a linear recurrence for e large 
enough. □ 



A proof of this proposition in the style of the proofs of Theorems [4.6| and ^.S] also gives 
bounds on the degrees of the numerator and denominator polynomials of the rational 
generating function '^d>2^k{d)z'^- So, this allows us, at least for k not too large, to 
determine recurrences via the computer, by first computing enough numbers Rk{d) to 



guess a linear recurrence using gfun pSf, and then applying Lemma |4.5| . 

In the next theorem, we determine Rk{d) explicitly for 3 < < 9 by computing the 
corresponding rational generating functions. 

Theorem 7.5. For 3 < k < 9, the generating functions 'Ylid>2^k{d)z'^ are respectively 
E^^(^)^' = T^' (7-3) 



d>2 



^ (1 — Z)[l + Z'^)[l — Z — Z''] 

2/n I A^2\ 



d>2 



(7.5) 



d>2 



l^^'^"^)' - (l-z)a-z-z^)(l-z^-z^) ' ^^-^^ 



d>2 



d>2 



^ , z\2 -Az + 6z^ + 2z^ + 2z^ - 12z^ - 2^^ + 72:^) 
l^^^yd> = (l-z){l-z-z^){l + z^-z^^ ■ ^^-^^ 



d>2 



Proof: These assertions can, in principle, be proved as we described above the state- 
ment of the theorem. However, it is instructive to exhibit the solutions to ( |7. 1|) in each 
case explicitly, from which ( |7.2| )- (|7l8| ) then follow easily by means of generating function 
calculus. 

For the description of the solution sets we use a standard notation from the calculus of 
words (cf. [0): Given an alphabet A, the set of all words (including the empty word) 
consisting of letters from A is denoted by A*. With that terminology, the solutions to 
( [7.1D in the cases k = 3, . . . ,9 can be described as follows: 

For k = 3, the binary representations of the solutions a to ([71]), < a < 2'^ — 1, 
are obtained by forming all possible rotations of the strings of length d from the set 
{0,01}*\{0}*. 
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For k = 4, the binary representations of the solutions a to ( |7.1| ), < a < 2"^ — 1, are 
obtained by forming all possible rotations of the strings of length d from the set {01}*. 

For k = 5, the binary representations of the solutions a to (|7[1|), < a < 2^^ — 1, 
are obtained by forming all possible rotations of the strings of length d from the set 
{0,001,0011}*\{0}*. 

For k = 6, the binary representations of the solutions a to ( |7. 1| ) , < a < 2'^ — 1, 
are obtained by forming all possible rotations of the strings of length d from the set 
{01,0011}*. 



For k = 7, the binary representations of the solutions a to (|7. 1|) , < a < 2 —1, 
are obtained by forming all possible rotations of the strings of length d from the set 
({0,001}*U{01,011}*)\{0}*. 



For k = 8, the binary representations of the solutions a to (|7. 1|) , < a < 2 —1, 
are obtained by forming all possible rotations of the strings of length d from the set 
{001,011}*. 



For k = 9, the binary representations of the solutions a to (|7. 1|) , < a < 2*^ — 1 



are obtained by forming all possible rotations of the strings of length d from the set 
({0, 00011, 000111} U {0001, 000101, 00010101, . . . })*\{0}*. 

These assertions can be established in a way similar to the proof of Proposition |4.1| , 
with use of the fact that the solutions a to (O), < a < 2*^-1, are characterized by 
the property that there is no instance of a 1 occurring in the same place in the binary 
expansions of a and {k — l)a (mod 2'^ — 1). 

The formulas ( [7.2| )-( rrB| ) for the generating functions follow, as we now demonstrate 
for the case k = 5. 

From the above, the binary representation of a solution a to ( [7.1D with k = 5 must be 
some rotation of a nonzero string of length d obtained by concatenating the blocks 0, 001, 
and 0011. To identify the block in the cyclic binary representation of a which overlaps 
with the rightmost place of the binary representation of a, we underline the digit in that 
block where the overlap occurs. We have the following possibilities for such blocks: 0, 
001, 001, 001, 0011, 0011, 0011, 0011. Once we have chosen one of these possibilities, we 
have to "glue" this already chosen block with a (possibly empty) sequence of other blocks 
from {0,001,0011} to form a binary string representing a solution to (|7. 1|) , where the 
underlined place is considered as the rightmost place in the string (through appropriate 
rotation). Hence, in symbolic notation again, the set of all solutions to (|7.1| ) is 

({0,001,001,001,0011,0011,0011,0011} X {0,001,0011}*)\{0}*. 

In particular, a string taken from this set is a solution to ( [7.1D with corresponding d 
equal to the length of the string. Since the set {0,001,001,001,0011,0011,0011,0011} 
contains one string of length 1, three strings of length 3, and four strings of length 4, 
its corresponding generating function is z + 3z^ + Az"^. Similarly, the set {0,001,0011} 
has generating function z + z^ + z^ . Therefore, by elementary "generatingfunctionology" 
(see [0), the generating function for the solutions a to ( [7.1|) , and, hence, the generating 
function ^^>2 R5{d)z'^, is given by 

{z + 3z^ + Az^) ■ - (7.9) 
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Simplification of expression ( |7.9| ) gives (|7^). 

We leave tlie details in the remaining cases to the reader. □ 
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